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Summary 


Scientific advances over the past several decades have accelerated the ability to engineer existing organisms 
and to potentially create novel ones not found in nature. Synthetic biology, which collectively refers to concepts, 
approaches, and tools that enable the modification or creation of biological organisms, is ifiBiri BIffursu'ddKv.v'd'til 
whelmingly for beneficial purposes ranging from reducing the burden of disease to improving agricultural yields 
to remediating pollution. Although the contributions synthetic biology can make in these and other areas hold 
great promise, it is also possible to imagine malicious uses that could threaten U.S. citizens and military personnel. 
Making informed decisions about how to address such concerns requires a realistic assessment of the capabili¬ 
ties that could be misused. To that end, the U.S. Department of Defense, working with other agencies involved 
in biodefense, asked the National Academies of Sciences, Engineering, and Medicine to develop a framework to 
guide an assessment of the security concerns related to advances in synthetic biology, to assess the levels of con¬ 
cern warranted for such advances, and to identify options that could help mitigate those concerns. An excerpted 
version of the study charge highlights the key tasks undertaken (see Chapter 1, Box 1-2 for the more detailed 
statement of task): 

To assist the U.S. Department of Defense’s Chemical and Biological Defense Program (CBDP), the National Acad¬ 
emies of Sciences, Engineering, and Medicine will appoint an ad hoc committee to address the changing nature of 
the biodefense threat Sne.cifica11v. MB^BPWMHftB>«wqB^l^yflIWffl BH ppfflWBpBI 

biological functions, systems, or microorganisms resulting in the production of disease-causing agents or toxins. . . . 
Initially, the committee will develop a strategic framework to guide an assessment of the potential security vulner¬ 
abilities related to advances in biology and biotechnology, with a particular emphasis on synthetic biology. 

The framework will focus on how to address the following three questions: What are the possible security concerns 
with regard to synthetic biology that are on the horizon? What are the time frames of development of these concerns? 
What are our options for mitigating these potential concerns? . . . 

. . . [T]he committee will use the outlined strategic framework to generate an assessment of potential vulnerabilities 
posed by synthetic biology. Inputs to this assessment may include information about the current threat, current pro¬ 
gram priorities and research, and an evaluation of the current landscape of science and technology. Conclusions and 
recommendations will include a list and description of potential vulnerabilities posed by synthetic biology. 

An initial framework for assessing concerns was published in an interim report (National Academies of Sciences, 
Engineering, and Medicine, 2017a). This, the study’s final report, builds on and supersedes that report. This report 
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BIODEFENSE IN THE AGE OF SYNTHETIC BIOLOGY 


explores and envisions potential misuses of synthetic biology, including concepts that are regularly discussed in 
open meetings. The potential misuses as they are discussed in the report are neither comprehensive nor enabling 
in the level of information and detail provided; they are included to illustrate the expanding mission of biodefense 
in the age of synthetic biology. 


OVERARCHING RECOMMENDATION 

Biotechnology in the age of synthetic biology expands the landscape of potential defense concerns. The 
U.S. Department of Defense (DoD) and its partnering agencies should continue to pursue ongoing strategies 
for chemical and biological defense; these strategies remain relevant in the age of synthetic biology. DoD 
and its partners also need to have approaches to account for the broader capabilities enabled by synthetic 
biology, now and into the future. 

The nation’s experience preparing for naturally occurring diseases provides a strong foundation for developing 
strategies to prevent and respond to emerging biologically enabled threats, particularly those based on naturally 
occurring pathogens. But synthetic biology approaches also have the potential to be used in ways that could 
change the presentation of an attack, for example, by modifying the properties of existing microorganisms, using 
microorganisms to produce chemicals, or employing novel or unexpected strategies to cause harm. It is valuable 
for the U.S. government to pay close attention to rapidly advancing fields such as synthetic biology, just as it did 
to advances in chemistry and physics during the Cold War era. However. 

The partners involved in the U.S. biodefense enterprise will need expanded strategies 
and approaches to account for the new capabilities enabled by advances in this field. 

A FRAMEWORK FOR ASSESSING CONCERN CONTRIBUTES TO PLANNING 

Recommendation 

The Department of Defense and its interagency partners should use a framework in assessing synthetic 

biology capabilities and their implications. 

(a) A framework is a valuable tool for parsing the changing biotechnology landscape. 

(b) Using a framework facilitates the identification of bottlenecks and barriers, as well as efforts to 
monitor advances in technology and knowledge that change what is possible. 

(c) A framework provides a mechanism for incorporating the necessary technical expertise into the 
assessment. A framework enables the participation of technical experts in synthetic biology and biotech¬ 
nology along with experts in complementary areas (e.g., intelligence and public health). 

The framework developed in the report identifies the features of a synthetic biology-enabled capability that 
would increase or decrease the level of concern about a given capability being used for harm. As summarized 
in Figure S-l, this framework identifies factors to determine the relative levels of concern posed by advances in 
biotechnology. In addition to supporting the analysis conducted in this study, the framework is intended to aid 
others in their consideration of current and future synthetic biology capabilities. Specifically, the framework is 
designed to support uses including analyzing existing biotechnologies to evaluate the levels of concern warranted 
at present; understanding how various technologies or capabilities compare to, interact with, or complement each 
other; identifying key bottlenecks and barriers that, if removed, could lead to a change in the level of concern about 
a capability; evaluating the implications of new experimental results or new technologies; and horizon-scanning 
to predict or prepare for potential future areas of concern. Use of a framework for assessing the implications of 
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Usability of the Technology 

• Ease of use 

• Rate of development 

• Barriers to use 

• Synergy with other technologies 



Requirements of Actors 

• Access to expertise 

• Access to resources 

• Organizational footprint requirements 


Potential for Mitigation 


• Deterrence and prevention capabilities 

• Capability to recognize an attack 

• Attribution capabilities 

• Consequence management capabilities 



IWMllBilgHWgB The framework consists of four factors, along with descriptive elements 
within each factor. The factors are Usability of the Technology, Usability as a Weapon, Requirements of Actors, and Potential 
for Mitigation. These factors delineate the information used to assess the level of concern for particular synthetic biology- 
enabled capabilities. 


synthetic biology capabilities thus contributes to biodefense planning and facilitates consideration of expert opin¬ 
ions about specific synthetic biology-enabled capabilities or combinations of capabilities. 

SYNTHETIC BIOLOGY EXPANDS WHAT IS POSSIBLE 

Synthetic biology expands what is possible in creating new weapons. It also expands the range of actors 
who could undertake such efforts and decreases the time required. Based on this study’s analysis of the poten¬ 
tial ways in which synthetic biology approaches and tools may be misused to cause harm, the following specific 
observations were made: 

(a) Of the potential capabilities assessed, three currently warrant the most concern: (1) re-creating 
known pathogenic viruses, (2) making existing bacteria more dangerous, and (3) making harmful 
biochemicals via in situ synthesis. The first two capabilities are of high concern due to usability of the 
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technology. The third capability, which involves using microbes to produce harmful biochemicals in 
humans, is of high concern because its novelty challenges potential mitigation options. 

(b) With regard to pathogens, synthetic biology is expected to (1) expand the range of what could be 

^BifiEgdBttg^etei^sn^ionganisni^;flnd^ii!e^paaMiiffi^anW€!'OfiPieegrssna>oWfliiiMIHBd^i^i^snieia 
efforts. The creation and manipulation of pathogens is facilitated by increasingly accessible technologies 
and starting materials, including DNA sequences in public databases. A wide range of pathogen charac¬ 
teristics could be explored as part of such efforts. 

(c) With regard to chemicals, biochemicals, and toxins, synthetic biology blurs the line between chemi¬ 
cal and biological weapons. High-potency molecules that can be produced through simple genetic 
pathways are of greatest concern, because they could conceivably be developed with modest resources 
and organizational footprint. 

(d) It may be possible to use synthetic biology to modulate human physiology in novel ways. These 
ways include physiological changes that differ from the typical effects of known pathogens and chemi¬ 
cal agents. Synthetic biology expands the landscape by potentially allowing the delivery of biochemicals 
by a biological agent and by potentially allowing the engineering of the microbiome or immune system. 
Although unlikely today, these types of manipulations may become more feasible as knowledge of com¬ 
plex systems, such as the immune system and microbiome, grows. 

(e) Some malicious applications of synthetic biology may not seem plausible now but could become 
achievable if certain barriers are overcome. These barriers include knowledge barriers, as is the case 
for building a novel pathogen, or technological barriers, as in engineering complex biosynthetic pathways 
into bacteria or re-creating known bacterial pathogens. It is important to continue to monitor advances in 
biotechnology that may lower these barriers. 

Synthetic biology concepts, approaches, and tools do not, in and of themselves, pose inherent harm. Rather, 
concerns derive from the specific applications or capabilities that synthetic biology might enable. The framework 
developed in the report was applied to assess the relative levels of concern posed by a set of synthetic biology 
capabilities. This assessment was undertaken in several steps. First, the framework was used to qualitatively 
analyze each of the identified capabilities individually. This analysis included considerations related to the state 
of the art of the technologies involved, the feasibility of using the capability to produce an effective weapon, the 
characteristics and resources an actor would likely require to carry out an attack, and information on proactive and 
reactive measures that might be taken to help mitigate the effects of misusing the capability. Then, an overall level 
of concern was determined for each capability relative to the other capabilities considered and an assessment of 
the landscape of capabilities and concerns presented. The results of this assessment are summarized in Figure S-2. 

Capabilities currently warranting the highest relative level of concern include re-creating known pathogenic 
viruses, making biochemical compounds via in situ synthesis, and the use of synthetic biology to make existing 
bacteria more dangerous. These capabilities are based on technologies and knowledge that are readily available 
to a wide array of actors. Capabilities posing a moderate-to-high relative level of concern include manufacturing 
chemicals or biochemicals by exploiting natural metabolic pathways and the use of synthetic biology to make 
existing viruses more dangerous. These capabilities are also supported by available technologies and knowledge 
but involve more constraints and would likely be limited by factors related to both biology and skill. Capabilities 
posing a moderate relative level of concern include manufacturing chemicals or biochemicals by creating novel 
metabolic pathways, efforts to modify the human microbiome to cause harm, efforts to modify the human immune 
system, and efforts to modify the human genome. Although conceivable, these capabilities are more futuristic and 
likely limited by available knowledge and technology. Capabilities warranting a lower relative level of concern 
include re-creating known pathogenic bacteria and creating new pathogens; these capabilities involve major design 
and implementation challenges. The use of human gene drives warrants a minimal level of concern because it would 
be impractical to rely on generations of sexual reproduction to spread a harmful trait through a human population. 

The application of the report’s framework in this analysis reflects a snapshot in time, given understanding 
of current technologies and capabilities. As the field continues to evolve, some bottlenecks will likely widen and 
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Highest Relative Concern 


Re-creating known pathogenic viruses I Making biochemicals via in situ synthesis I Making existing bacteria more dangerous 


■ Manufacturing chemicals or 

biochemicals by exploiting natural 
metabolic pathways 


Manufacturing chemicals or 
biochemicals by creating novel 
metabolic pathways 


Modifying the human microbiome 


Modifying the human immune system 


Modifying the human genome 


Re-creating known pathogenic bacteria 


Creating new pathogens 


Modifying the human genome 

Lowest Relative Concern using human gene drives 

FIGURE S-2 Relative ranking of concerns related to the synthetic biology-enabled capabilities analyzed. At present, capa¬ 
bilities toward the top warrant a relatively higher level of concern while capabilities toward the bottom warrant a relatively 
lower level of concern. 


some barriers will be overcome. Table S-l identifies a number of technical developments that may contribute to 
overcoming such bottlenecks and barriers to increase the feasibility or impact of a potential attack and the level 
of biodefense concern warranted for a capability. It is impossible to predict precisely when these developments 
might occur; those time lines are influenced by the drivers of commercial development and academic research, 
as well as by converging or synergistic technologies that may come from outside the field of synthetic biology. It 
will be important to continue to monitor advances in synthetic biology and biotechnology that may affect these 
bottlenecks and barriers. 
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TABLE S-l Bottlenecks and Barriers That Currently Constrain the Capabilities Considered and Developments 
That Could Reduce These Constraints 


Capability 

Bottleneck or Barrier 

Relevant Developments to Monitor 

Re-creating known pathogenic 
viruses 

Booting 

Demonstrations of booting viruses with synthesized genomes 

Re-creating known pathogenic 
bacteria 

DNA synthesis and assembly 

Improvements in synthesis and assembly technology for 
handling larger DNA constructs 


Booting 

Demonstrations of booting bacteria with synthesized genomes 

Making existing viruses more 
dangerous 

Constraints on viral genome 
organization 

Increased knowledge of viral genome organization and/ 
or demonstration of combinatorial approaches capable of 
facilitating larger-scale modifications to viral genome 


Engineering complex viral 
traits 

Increased knowledge of determinants of complex viral traits, 
as well as how to engineer pathways to produce them 

Making existing bacteria more 
dangerous 

Engineering complex bacterial 
traits 

Advances in combinatorial approaches and/or increased 
knowledge of determinants of complex bacterial traits, as well 
as how to engineer pathways to produce them 

Creating new pathogens 

Limited knowledge regarding 
minimal requirements for 
viability (in both viruses and 
bacteria) 

Increased knowledge of requirements for viability in viruses 
or bacteria 


Constraints on viral genome 
organization 

Increased knowledge of viral genome organization and/ 
or demonstration of combinatorial approaches capable of 
facilitating larger-scale modifications to viral genome 

Manufacturing chemicals or 
biochemicals by exploiting 
natural metabolic pathways 

Tolerability of toxins to the 
host organism synthesizing the 
toxin 

Pathway elucidation, improvements in circuit design, and 
improvements in host (“chassis”) engineering to make toxins 
tolerable to the host organism synthesizing the toxin 


Pathway not known 

Pathway elucidation and/or demonstrations of combinatorial 
approaches 


Challenges to large-scale 
production 

Improvements in intracellular and industrial productivity 

Manufacturing chemicals or 
biochemicals by creating novel 
metabolic pathways 

Tolerability of toxins to the 
host organism synthesizing the 
toxin 

Pathway elucidation and/or improvements in circuit design 
and/or improvements in host (“chassis”) engineering to make 
toxins tolerable to the host organism synthesizing the toxin 


Engineering enzyme activity 

Increased knowledge of how to modify enzymatic functions to 
make specific products 


Limited knowledge of 
requirements for designing 
novel pathways 

Improvements in directed evolution and/or increased 
knowledge of how to build pathways from disparate organisms 


Challenges to large-scale 
production 

Improvements in intracellular and industrial productivity 

Making biochemicals via in 
situ synthesis 

Limited understanding of 
microbiome 

Improvements in knowledge related to microbiome 
colonization of host, in situ horizontal transfer of genetic 
elements, and other relationships between microbiome 
organisms and host processes 

Modifying the human 
microbiome 

Limited understanding of 
microbiome 

Improvements in knowledge related to microbiome 
colonization of host, in situ horizontal transfer of genetic 
elements, and other relationships between microbiome 
organisms and host processes 
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TABLE S-l Continued 


Capability 

Bottleneck or Barrier 

Relevant Developments to Monitor 

Modifying the human immune 
system 

Engineering of delivery system 

Increased knowledge related to the potential for viruses or 
microbes to deliver immunomodulatory factors 


Limited understanding of 
complex immune processes 

Knowledge related to how to manipulate the immune system, 
including how to cause autoimmunity and predictability across 
a population 

Modifying the human genome 

Means to engineer horizontal 
transfer 

Increased knowledge of techniques to effectively alter 
the human genome through horizontal transfer of genetic 
information 


Lack of knowledge about 
regulation of human gene 
expression 

Increased knowledge related to regulation of human gene 
expression 


NOTE: Shading indicates developments thought to be propelled by commercial drivers. Some approaches, such as combinatorial approaches 
and directed evolution, may allow bottlenecks and barriers to be widened or overcome with less explicit knowledge or tools. 


A RANGE OF STRATEGIES IS NEEDED TO PREPARE AND RESPOND 

Recommendations 

Many of the traditional approaches to biological and chemical defense preparedness will be relevant 
to synthetic biology, but synthetic biology will also present new challenges. The Department of Defense 
(DoD) and partner agencies will need approaches to biological and chemical weapons defense that meet 
these new challenges. 

(a) The DoD and its partners in the chemical and biological defense enterprise should continue 
exploring strategies that are applicable to a wide range of chemical and biodefense threats. Nimble 
biological and chemical defense strategies are needed because of rapid rates of technological change, as 
well as strategies adaptable to a wide range of threats because of uncertainty about which approaches an 
adversary might pursue. 

(b) The potential unpredictability related to how a synthetic biology-enabled weapon could manifest 
creates an added challenge to monitoring and detection. The DoD and its partners should evalu¬ 
ate the national military and civilian infrastructure that informs population-based surveillance, 
identification, and notification of both natural and purposeful health threats. An evaluation should 
consider whether and how the public health infrastructure needs to be strengthened to adequately recognize 
a synthetic biology-enabled attack. Ongoing evaluation will support responsive and adaptive management 
as technology advances. 

(c) The U.S. government, in conjunction with the scientific community, should consider strategies that 
manage emerging risk better than current agent-based lists and access control approaches. Strategies 
based on lists, such as the Federal Select Agent Program Select Agents and Toxins list, will be insufficient 
for managing risks arising from the application of synthetic biology. While measures to control access 
to physical materials such as synthetic nucleic acids and microbial strains have merits, such approaches 
will not be effective in mitigating all types of synthetic biology-enabled attacks. 
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Exploration Areas 

It has been stated by both scientific and political leaders that the 21st century is the century of the life sciences. 
But as with previous expansions in technological capabilities, biotechnology in the age of synthetic biology presents 
af‘dual-use dilemma” that scientific knowledge, materials, and techniques required for beneficial research or devel¬ 
opment could be misused to cause harm. Although current approaches to defense and public health preparedness 
remain valuable, there are also clear limitations to current approaches such as pathogen list-based screening tools. 

To comprehensively assess the preparedness and response capabilities of existing military and civilian defense 
and public health enterprises or to determine how to address gaps lies outside the scope of this study; however, 
exploration of the following areas is suggested to address some of the challenges posed by synthetic biology: 

(a) Developing capabilities to detect unusual ways in which a synthetic biology-enabled weapon may 
fllBB ffl M B BBISMillH K I I I JlIlHiii l llfe i W II IK IIl iB lilM 
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(b) Harnessing computational approaches for mitigation. The role of computational approaches for pre¬ 
vention, detection, control, and attribution will become more important with the increasing reliance of 
synthetic biology on computational design and computational infrastructure. 

(c) ; Leveraging syhthetie biology to advance detection, therapeutics, vaccines, and other medical 

countermeasures. Taking advantage of beneficial applications of synthetic biology for countermeasure 
research and development is expected to prove valuable, along with corresponding efforts to facilitate 

Although addressing the potential concerns posed by synthetic biology in the age of biotechnology will remain 
a challenge for scientists and for the nation’s defense, there is reason for optimism that, with continued monitoring 
of biotechnology capabilities and strategic biodefense investments, the United States can foster fruitful scientific 
and technological advances while minimizing the likelihood that these same advances will be used for harm. 
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living organisms and potentially create novel ones not found in nature. Synthetic biology collectively refers to 
concepts, approaches, and tools that enable the modification or creation of biological organisms. These concepts, 
approaches, and tools are being developed and refined by researchers in universities, governments, and industry in 
the United States and around the globe. Although synthetic biology is being pursued overwhelmingly for benefi¬ 
cial and legitimate purposes, such as addressing disease, remediating pollution, and increasing the yield of crops 
(see Box 1-1), there are potential uses that are detrimental to humans and other species. To inform investments to 
mitigate potential threats, those responsible for protecting the security of nations must consider how these emerging 
approaches and technologies might be used in acts of warfare or terrorism, the intent and capability of adversaries 
to effect such uses, and the potential impacts of such attacks. 

Statements and reports issued over the past several years have come to different conclusions regarding the 
national security threats posed by emerging biotechnologies and the level of concern that is warranted. Former 
Director of National Intelligence James Clapper, in his 2016 annual threat assessment to Congress, grouped con¬ 
cerns about genome editing, an example of synthetic biology technology, under discussion of weapons of mass 
destruction (Clapper, 2016). Reports of federal government advisory committees, such as the 2016 report of the 
President’s Council of Advisors on Science and Technology, “Action Needed to Protect Against Biological Attack” 
(PCAST, 2016), and a 2016 report of the JASON advisory group on potential implications of the gene editing 
platform CRISPR and other technologies for U.S. national security (Breaker, 2017), posit that biotechnology pres¬ 
ents a new and significant threat. However, bioweapons are not a new phenomenon, and others have countered 
that, although advances in synthetic biology may add to the biological weapons landscape, these developments do 
not fundamentally change the landscape or warrant special action to address concerns (Vogel, 2013; Jefferson et 
al., 2014). That argument has been based on the notion that using natural pathogens to cause harm may be easier 
and just as effective as using synthetic biology to create bioweapons, and so synthetic biology did not change the 
level of concern, at least at that time (A. Paul interview with K. Vogel, February 24, 2006, New York, as cited in 
Vogel, 2012; Jefferson et al., 2014). 

Although it is possible to imagine numerous types of malicious uses of synthetic biology, making informed 
decisions about whether and how to mitigate these potential uses requires a realistic assessment of the security 
concerns that this technology creates. To that end, the U.S. Department of Defense, working with other agen¬ 
cies involved in biodefense, asked the National Academies of Sciences, Engineering, and Medicine to develop 
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BOX 1-1 

Benefits of Synthetic Biology 

The field of synthetic biology opens tremendous possibilities for the application of biotechnology to 
improve human well-being, as well as the health of animals, plants, and the environment. Such applica¬ 
tions hold substantial economic potential. For example, annual U.S. revenues from genetically engineered 
plants and microbes are estimated to exceed $300 billion, and industrial biotechnology (the use of biological 
components to generate industrial products) is estimated to account for more than $115 billion in annual 
U.S. revenues. New applications for biotechnology, particularly those driven by innovations in synthetic 
biology, are expected to further grow the size and reach of the bioeconomy (White House, 2012). 

Often looked to as a means of producing products that would otherwise be difficult to obtain, synthetic 
biology has already led to new ways of producing pharmaceuticals including opioids and the antimalarial 
drug artemisinin. There are ongoing efforts to engineer microorganisms to produce fuels, act as detection 
devices, and clean up toxic spills. Synthetic biology is also seen as a potential means to grow organs 
for transplant, manipulate the microbiome, and even produce cosmetics! In addition to such application- 
driven goals, synthetic biology is also advancing the reach and role of science in society by inspiring more 
people to engage in biological experimentation, such as through the International Genetically Engineered 
Machine competition or by engaging with community laboratories. This broad array of applications and 
implications suggests that the potential benefits of synthetic biology are limited only by human creativity 
and imagination. 


a framework to guide an assessment of the security concerns related to advances in the life sciences in the “age 
of synthetic biology,” to assess the level of concern warranted for various advances, identify areas of potential 
vulnerability, and provide ideas for options that could be considered to help mitigate potential vulnerabilities. To 
aid decision making in agencies across the biodefense enterprise, including the U.S. Department of Homeland 
Security, the U.S. Department of Health and Human Services’ Office of the Assistant Secretary for Preparedness 
and Response, the intelligence community, and other agencies, the Department of Defense asked the National 
Academies to consider potential concerns that are relevant to all U.S. citizens, both at home and abroad, in both 
civilian and military contexts. See Box 1-2 for the Statement of Task. 

The study focuses on activities that could directly threaten human health or the capacity of military personnel 
to execute their missions. There are other conceivable uses of synthetic biology that are outside the scope of this 
study. The study does not address the potential ways in which plants, animals, and the pathogens that affect them 
could be modified for malicious purposes, for example, to undermine agricultural productivity, although the eco¬ 
nomic and societal impact of such an attack could be substantial. The study also does not address the modification 
of organisms to affect the environment or materials. Nonetheless, the technologies that might be used to threaten 
agricultural, environmental, or material targets, and the capabilities associated with those technologies, are likely 
comparable or even identical to the technologies and capabilities discussed in the report; as a result, the framework 
and analyses presented in the report may be useful for a broader array of contexts than those addressed in this study. 

Finally, the report does not weigh the benefits on balance with the risks of synthetic biology advancements. 
Synthetic biology can play a role in achieving a number of societal goals but it is not within the purview of this 
study to compare the size or nature of those benefits with the potential risks. It is not the intent of the report or the 
study sponsor to imply that research efforts that use synthetic biology approaches for beneficial purposes should 
be curtailed. 
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BOX 1-2 

Statement of Task 

To assist the U.S. Department of Defense’s Chemical and Biological Defense Program (CBDP), the 
National Academies of Sciences, Engineering, and Medicine will appoint an ad hoc committee to address 
the changing nature of the biodefense threat in the age of synthetic biology. Specifically, the focus of the 
study will be the manipulation of biological functions, systems, or microorganisms resulting in the produc¬ 
tion of disease-causing agents or toxins. The study will be conducted in two primary phases and will be 
followed by a workshop. Initially, the committee will develop a strategic framework to guide an assessment 
of the potential security vulnerabilities related to advances in biology and biotechnology, with a particular 
emphasis on synthetic biology. 

The framework will focus on how to address the following three questions: What are the possible 
security concerns with regard to synthetic biology that are on the horizon? What are the time frames of 
development of these concerns? What are our options for mitigating these potential concerns? The com¬ 
mittee will publish a brief interim, public report outlining the developed framework. This framework will 
not be a threat assessment, but rather, will focus on ways to identify scientific developments to enable 
opportunities that have the potential to mitigate threats posed by synthetic biology in the near, mid, and 
long term, with the specific time frames defined by the committee. The framework will lay out how best to 
consider the trajectory of scientific advances, identify potential areas of vulnerability, and provide ideas for 
potential mitigation opportunities to consider. 

In Phase 2 of the study, the committee will use the outlined strategic framework to generate an as¬ 
sessment of potential vulnerabilities posed by synthetic biology. Inputs to this assessment may include 
information about the current threat, current program priorities and research, and an evaluation of the 
current landscape of science and technology. Conclusions and recommendations will include a list and 
description of potential vulnerabilities posed by synthetic biology. 


UNDERSTANDING SYNTHETIC BIOLOGY 

Biotechnology is a broad term encompassing the application of biological components or processes to advance 
human purposes, while synthetic biology is a narrower term referring to a set of concepts, approaches, and tools 
within biotechnology. A variety of perspectives has been offered to characterize the core principles of synthetic 
biology and the activities of its practitioners (see, e.g., Benner and Sismour, 2005; Endy, 2005; Dhar and Weiss, 
2007), but there remains no universally agreed-upon definition (Nature Biotechnology, 2009). One distillation is 
that synthetic biology “aims to improve the process of genetic engineering” (Voigt, 2012). Chapter 2 provides 
additional detail on how synthetic biologists pursue that improvement. 

A hallmark of synthetic biology is the use of concepts and approaches common to engineering disciplines. 
These can include standardization of components (e.g., well-characterized functions encoded by DNA), the use 
of software and computational modeling for designing biological systems from those components, and the con¬ 
struction of prototypes based on those designs. Synthetic biologists frequently apply such approaches in iterative 
Design-Build-Test cycles to accelerate progress. 

This report takes a broad view of the field and does not attempt to narrowly define the term synthetic biology 
or to precisely separate it from other kinds of biotechnology. The concepts, approaches, and tools developed to 
advance synthetic biology will continue to be integrated more broadly into the life sciences toolkit and applied 
toward many biological research and biotechnology activities. Should a malicious actor seek to misuse such 
approaches, distinctions based on terminology will be irrelevant; similarly, the potential strategies for mitigating 
biodefense concerns are unlikely to be tied to a precise distinction between synthetic biology and other related 
activities. As a result, the analyses in the report focus on the potential applications of synthetic biology (also 
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described as synthetic biology-enabled capabilities or uses of synthetic biology) rather than on synthetic biology 
concepts, approaches, and tools themselves. In particular, the study was guided by the focus laid out in the State¬ 
ment of Task on “the manipulation of biological functions, systems, or microorganisms resulting in the production 
of a disease-causing agent or toxin.” Modifying a pathogen to facilitate its rapid spread through a population, 
manipulating a biological system to produce a potent toxin, introducing antibiotic resistance into an infectious 
microorganism, and purposely weakening a person’s immune system are just a few examples of the potential types 
of malicious uses addressed. 

ASSESSING POTENTIAL BIODEFENSE CONCERNS 

A fundamental component of this study is to provide a basis for assessing potential areas of concern in the age 
of synthetic biology. Establishing a process for considering concern is important because it provides structure and 
transparency to the analysis of specific factors and how these factors contribute to an overall level of concern. It 
thus enables an assessment to more clearly convey the reasoning underlying judgments about potential concerns, 
increases consistency across assessments, and facilitates the comparison of assessments undertaken by different 
analysts or conducted at different times. 

A number of possible approaches can be taken to develop such a process. The report presents a framework, 
which is largely a qualitative, multicriteria model, that could contribute to a qualitative, quantitative, or semi- 
quantitative assessment. As presented in Chapter 3, the methodology used to generate and apply this framework 
was informed by a review of existing frameworks, previous assessments, and related work relevant to biodefense, 
synthetic biology, and other biotechnology threats. Relevant documents include NRC (2004), IOM/NRC (2006), 
Tucker (2012), U.S. Government (2012, 2014), HHS (2013), Blue Ribbon Study Panel on Biodefense (2015), 
Royal Society (2015), Cummings and Kuzma (2017), and DiEuliis and Giordano (2017). Selected prior analyses 
are described briefly in Appendix B. The framework presented in the report was also informed by the expert judg¬ 
ment of committee members and input received during the course of the study. 

The report also applies the proposed framework to analyze potential concerns associated with a number of 
synthetic biology-enabled capabilities. These analyses and their results are presented in Chapters 4-6. Detailed 
descriptions of how the framework was used to conduct the current assessment can help inform efforts to assess the 
significance of biotechnology developments that occur in the future; monitor key bottlenecks and barriers identi¬ 
fied in the report that, if removed, could lead to a change in the relative level of concern; evaluate the change in 
the level of concern warranted when new experimental results are reported or new technologies arise; or scan the 
horizon to predict or prepare for potential future areas of concern. 

While the report presents a framework for assessment of potential biodefense concerns and describes how 
that framework was applied to analyze synthetic biology-enabled capabilities, it is important to emphasize that 
this study is not a threat assessment. The study did not access intelligence or military information on potential 
actors, who may range from an individual to a dedicated team to a government body who may seek to misuse life 
sciences or their specific intent or specific capacity to undertake such misuse. Because information on actors is not 
included in the assessment presented in the report, a likelihood of harm cannot be fully estimated. By combining 
this assessment of concern with such classified information, however, the sponsor and others could, in the future, 
assess vulnerabilities and risks to inform decision making. 

MITIGATING POTENTIAL BIODEFENSE CONCERNS 

The report focuses on the state of science; it does not comprehensively assess the capability of the U.S. gov¬ 
ernment to respond to the concerns identified in the report; it was outside of the study scope to access classified 
information or to comprehensively review the landscape of approaches being undertaken by the Department of 
Defense and other federal agencies to mitigate potential misuse of the life sciences. However, the existence and 
nature of anticipated mitigation options affects judgments about the levels of concern posed by synthetic biology 
capabilities. Thus, consideration of anticipated mitigation options is embedded in the framework presented in the 
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report, and the analyses presented include discussion of the potential for mitigating different synthetic biology- 
enabled capabilities based on an understanding of the current state of science. 

The report also considers several types of mitigation approaches that may be useful for addressing some of 
the concerns arising from synthetic biology and biotechnology capabilities, as well as ways in which synthetic 
biology may affect those approaches (see Chapter 8). This portfolio of strategies includes options ranging from 
the promotion of norms of responsible conduct within the scientific community to strengthening the public health 
infrastructure to detect and respond to infectious disease outbreaks. However, because it was outside of the study’s 
scope to consider all of the mitigation options available to the defense enterprise, the report does not make com¬ 
prehensive, explicit recommendations regarding mitigation approaches. 

STUDY APPROACH 

To carry out the task, the National Academies appointed a committee including members with expertise in 
such areas as synthetic biology, microbiology, computational tool development and bioinformatics, biosafety, 
public health, and risk assessment (see Appendix D for biographical information). 

The study was conducted in two phases. Phase 1 led to the development of an interim report proposing a frame¬ 
work for assessing potential vulnerabilities arising from developments in synthetic biology (National Academies 
of Sciences, Engineering, and Medicine, 2017a). The committee solicited feedback on the interim report from 
the synthetic biology, security, and policy communities to inform the second phase of the study. During Phase 2, 
the committee refined elements of the framework and applied the final framework to assess concerns posed by 
synthetic biology-enabled capabilities. This report, which represents the culmination of the study, presents the 
committee’s assessment along with conclusions and recommendations. It thus extends and supersedes the interim 
report. This two-phase approach enabled the committee to understand the needs and motivations of the sponsor 
and other biodefense agencies, develop and refine a framework for assessing concerns, and apply the framework 
to provide an assessment of concerns associated with synthetic biology-enabled capabilities. 

The study was informed not only by committee members’ expert judgment, but also by the committee’s analy¬ 
sis of information in published literature, including a review of existing frameworks and assessments as well as 
technical developments, progress, and barriers in synthetic biology, immunology, microbiology, and other relevant 
fields. The study was also informed by interactions with experts who shared their knowledge with the committee 
during public data-gathering meetings and webinars and by public comment and input. Additional details on the 
study process and data-gathering activities are provided in Appendix F. 

The committee did not leverage classified information that others have created or utilized in their consideration 
of questions related to this study’s task. Classified information was not included in the committee’s delibera¬ 
tions; the resulting report is not classified and can be shared publicly. This facilitates the involvement of a wider 
community in the discussions during the study process and after the resulting reports are released. This report 
explores and envisions potential misuses of synthetic biology, including concepts that are regularly discussed in 
open meetings. The potential misuses as they are discussed in the report are neither comprehensive nor enabling 
in the level of information and detail provided; they are included to illustrate the expanding mission of biodefense 
in the age of synthetic biology. 


Terminology 

Although the report avoids precisely defining synthetic biology or drawing a strict distinction between syn¬ 
thetic biology and biotechnology, certain terms are used in a deliberate fashion to reflect the scope and nature of 
the assessment presented. For the purposes of this report: 

• Agent or bioagent is used broadly to refer to any product created using biological components that may be 
intended to cause harm. In the context of synthetic biology, an agent could be a pathogen, a toxin, or even 
a biological component, such as a genetic construct or a biochemical pathway, that may be developed with 
the intent to harm a human target. 
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• Actor is used to refer to individuals or groups who may seek to effect an attack. 

• Target is typically used to refer to the human beings harmed (or intended to be harmed) in an attack. In the 
context of manipulation of biological components, target may be used to refer to the intended outcomes 
of those manipulations. 

• Capability is typically used to refer to the ability of an actor to produce and use an agent (or in some 
contexts, the ability for a target to mitigate adverse outcomes). The assessments presented in the report 
focus on synthetic biology-enabled capabilities, that is, applications that may be enabled by the misuse of 
synthetic biology concepts, approaches, or tools. 

• Vulnerability refers to potential malicious capabilities against which we are not currently well protected. 
Vulnerabilities are a function of threat plus capabilities. Because the study did not include consideration 
of classified information about specific threats, specific actors, or specific capabilities within the U.S. 
government to address these threats, strictly speaking, it does not provide information on vulnerabilities 
but rather on potential vulnerabilities. Potential vulnerabilities are also referred to in the report as concerns. 

• Concern is the term used to capture the committee’s thinking regarding the defense implications of 
synthetic biology-enabled capabilities. Level of concern is used in reference to the relative intensity of the 
committee’s opinion regarding potential misuse. 

• Threat encompasses both an actor’s capability to cause harm and the actor’s intent to do so. Because the 
study did not include access to information on specific actors and their intent, the assessment produced 
is not a threat assessment per se. Rather, the report considers the types of malicious actions that could 
conceivably be taken and assesses the relative level of concern they pose. 

• Risk refers to the likelihood and severity of harm. Again, because intelligence information on aspects such 
as actor intent was not considered, the likelihood of harm cannot be fully estimated and the term risk is 
not used in reference to the assessments undertaken as part of this study. 

Organization of the Report 

The report begins with a discussion of synthetic biology and explores how synthetic biology approaches 
are changing what can be accomplished by biotechnology (Chapter 2). The chapter highlights the fundamental 
Design-Build-Test cycle that characterizes a synthetic biology approach to problem solving. Appendix A discusses 
a number of concepts, approaches, and tools that are enabling continued progress in the field. 

Chapter 3 describes the development of the framework presented in the report and provides information on 
the approach used in applying this framework to assess potential biodefense concerns posed by synthetic biology 
capabilities. 

The following three chapters (4-6) discuss the results of the committee’s assessment of synthetic biology- 
enabled capabilities including the use of pathogens as weapons (Chapter 4), the production of chemicals and 
biochemicals (Chapter 5), and the creation of bioweapons that alter the human host (Chapter 6). 

Chapter 7 discusses advances in related fields whose convergence with synthetic biology may impact the 
ability to misuse biotechnology to create weapons, such as by helping to overcome challenges in delivery, stabil¬ 
ity, or targeting of an agent. 

Chapter 8 discusses, from a broad perspective, some current approaches for mitigating concerns related to 
the malicious use of biotechnology, how synthetic biology may challenge those approaches, and conversely, how 
synthetic biology may help address challenges or bolster mitigation approaches. 

Finally, Chapter 9 summarizes the relative concerns posed by the analyzed synthetic biology-enabled capa¬ 
bilities, highlights examples of key bottlenecks and barriers to monitor, and provides the report’s conclusions and 
recommendations. 
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To frame and guide the study, the relationship of synthetic biology to other areas of biotechnology was explored 
along with the context in which synthetic biology tools and applications are being pursued. This chapter describes, 
in the context of this study, what it means to be in “the age of synthetic biology” and introduces key concepts, 
approaches, and tools that were considered. 

WHAT IS SYNTHETIC BIOLOGY? 

Biotechnology is a broad term encompassing the application of biological components or processes to advance 
human purposes. Although the term itself is thought to have been in use for only about a century, humans have 
used various forms of biotechnology for millennia. Synthetic biology refers to a set of concepts, approaches, and 
tools within biotechnology that enable the modification or creation of biological organisms. While there remains 
no universally agreed-upon definition of synthetic biology (with some defining it more narrowly and others more 
broadly; see, e.g., Benner and Sismour, 2005; Endy, 2005; Dhar and Weiss, 2007), one distillation is that synthetic 
biology “aims to improve the process of genetic engineering” (Voigt, 2012). By way of backdrop for this state¬ 
ment, it is useful to note that some of the concepts and approaches now associated with synthetic biology have 
roots going back to the early days of genetic engineering in the 1970s and the improvements and achievements 
that were envisaged then. In 1974, for example, the molecular biologist Walter Szybalski set the stage for some 
key synthetic biology concepts and presaged activities that have now been demonstrated. 1 An inflection point for 
the field occurred around the year 2000, after which synthetic biology gained significant attention and momentum. 
Two publications often identified with the field’s acceleration are by Elowitz and Leibler (2000) and Gardner et al. 
(2000). Although genetic engineering was occurring—and improving—prior to 2000, and the principles espoused 
by synthetic biologists were already noted and in use to varying extents (see, e.g.. Toman et al., 1985; and Ptashne, 
1986), that year marked a shift toward the adoption of approaches more typical of engineering disciplines, but 
which had previously been given only modest attention in the biological sciences. 


1 “Up to now we are working on the descriptive phase of molecular biology. . . . But the real challenge will start when we enter the synthetic 
biology phase of research in our field. We will then devise new control elements and add these new modules to the existing genomes or build 
up wholly new genomes. This would be a field with the unlimited expansion potential and hardly any limitations to building ‘new better control 
circuits’ and . . . finally other ‘synthetic’ organisms, like a ‘new better mouse’. ... I am not concerned that we will run out [of] exciting and 
novel ideas ... in the synthetic biology, in general’’ (Szybalski, 1974). 
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FIGURE 2-1 Design-Build-Test (DBT) cycle. This study approached synthetic biology concepts, approaches, and tools from 
the standpoint of their role in the DBT cycle, which is fundamental to synthetic biology. 

NOTE: LC/MS = liquid chromatography-mass spectrometry. 

SOURCE: Modified from Petzold et al„ 2015. 


In improving the process of genetic engineering, synthetic biology places special emphasis on the Design- 
Build-Test (DBT) cycle 2 (see Figures 2-1 and 2-2), the iterative process of designing a prototype, building a 
physical instantiation, testing the functionality of the design, learning from its flaws, and feeding that information 
back into the creation of a new, improved design. Developments such as enhanced computing power, labora¬ 
tory automation, cost-effective DNA synthesis and sequencing technologies, and other powerful techniques to 
manipulate DNA have made it possible for biological engineers to rapidly repeat the DBT cycle to refine designs 
and products for a desired purpose. Key developments exemplifying these approaches include the establishment 
of standardized genetic parts registries, intensive use of models and other quantitative tools to simulate biological 
designs before building them, the availability of open-source DNA assembly methods, and the ability to create 
rationally designed genetic “circuits”—systems of DNA-encoded biological components designed to perform 
specific functions (Elowitz and Leibler, 2000; Gardner et al., 2000; Knight, 2003; iGEM, 2017a). 

The age of synthetic biology is marked by the broad adoption and consolidation of these concepts, approaches, 
and tools within the DBT cycle to accelerate the engineering of living organisms. The concepts, approaches, and 
tools developed to advance synthetic biology will continue to be integrated more broadly into the life sciences 
toolkit and applied toward many biological research and biotechnology activities. As a result, this report does 
not draw a precise distinction between synthetic biology and other aspects of advancing biological sciences, but 
considers synthetic biology a crucial contributor to the spectrum of activities within biology and biotechnology 
more broadly. 


2 Sometimes referred to as a Specify-Design-Build-Test-Leam cycle or other variations. 
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The age of synthetic biology is ushering in not only novel technologies, but the application of engineering 
paradigms to biological contexts. The general intent to manipulate biological systems and to apply engineering 
paradigms from other disciplines is not new; from the introduction of recombinant DNA technologies in the 1970s 
to the present, there has been a concerted effort to manipulate genetic material and biological organisms. What 
has changed is the increased power of particular technologies that enable engineering paradigms to be applied 
to biological materials. Assessing new technologies and platforms that may enable the creative or destructive 
manipulation of biological materials, systems, and organisms will be important for identifying potential security 
opportunities and vulnerabilities. 
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FIGURE 2-2 General workflow showing steps typical of the DBT cycle. This study focused on the core elements, Design- 
Build-Test, while recognizing that steps such as Specify and Learn can be considered separately or rolled into these core steps. 
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IMPLICATIONS OF THE AGE OF SYNTHETIC BIOLOGY 

Synthetic biology is enabled by tools and techniques from a variety of scientific disciplines, from electrical 
engineering to computation to biology to chemistry. For example, the exponential improvements in DNA sequenc¬ 
ing capabilities, initially developed to further our understanding of the human genome but soon applied to charac¬ 
terize many other organisms, have provided crucial raw material for synthetic biology and fueled innovation over 
the past decade. More recently, genome editing tools such as CRISPR/Cas9 (“clustered regularly interspaced short 
palindromic repeats”) (Jinek et al., 2012; Cong et al., 2013) have been adopted for synthetic biology techniques 
such as the regulation of gene circuits and the development of gene drives (genetic elements for which inheritance 
is favorably biased; see National Academies of Sciences, Engineering, and Medicine, 2016). Scientific progress in 
domains relevant to synthetic biology has been remarkably rapid; CRISPR/Cas9, for example, was extended from 
mammalian cell culture (in the United States) to primates (in China) in a single year (Cong et ah, 2013; Jinek et 
ah, 2013; Mali et ah, 2013; Niu et ah, 2014). 

Two somewhat dichotomous phenomena are increasing the pace and progress of engineering of biological sys¬ 
tems. The first is that bioengineering can be more theoretical, due to increased predictability of biological systems 
and evolving standards for biological performance. Biological engineering approaches make it possible to separate 
the design of a biological material or organism from its manufacture, and standards are evolving to facilitate a 
theoretical approach to biological design. Biological knowledge may thus be captured and applied in the design 
stage. The second phenomenon is the ability to try many different designs, often in parallel, and to potentially 
use directed evolution (see Appendix A) in living systems to perfect the design (see Box 2-1). The inexpensive 
technologies involved in designing and creating new DNA constructs to test make it easier to proceed without 
a hypothesis of how the design will work; in other words, it is “cheaper to make than to think.” 3 However, the 
level of underlying biological knowledge still affects the degree to which these biological engineering techniques 
can be successfully applied; for example, adjusting well-understood pathways to increase ethanol production is 
fundamentally easier than increasing the virulence of Francisella tularensis, whose virulence mechanisms remain 
largely unknown. 

These advances have real-world consequences for the development of new biotechnologies as well as their 
accessibility to actors of all types. On the positive side, it is expected that these technologies will enable a wider 
range of therapeutics, a wider range of biological detection and diagnostic methods, and opportunities to detect 
biological anomalies. However, these developments also potentially increase the power of even less-resourced 
malicious actors to produce a harmful biological agent. In this context, it is useful to consider the technologies that 
enable synthetic biology and how these developments may drive paradigm shifts in the practice of bioengineering. 

Enabling Technologies for Synthetic Biology 

Synthetic biology is enabled by numerous technologies that enhance success rates and facilitate experimenta¬ 
tion, particularly in the DBT cycle. The development of these technologies to some extent defines the transition to 
the current age of synthetic biology. These include technologies specifically created for synthetic biology, as well 
as technologies developed for general molecular biology and biotechnology that are being exploited by synthetic 
biologists. These enabling technologies serve as the tools that facilitate the specification of biological designs and 
constructions. Key enabling technology areas, examples of which are described in more detail in Appendix A and 
below (see Specific Synthetic Biology Technologies and Applications), include the following: 

• DNA synthesis and assembly. The heart of synthetic biology is the ability to make DNA constructs quickly 


3 For example, researchers recently synthesized and tested more than 7,000 genes to identify diverse homologs capable of complement- 
ing the deletion of two essential Escherichia coli genes. While the function of those 7,000 genes could be inferred by sequence similarity, it 
was more tractable to prove their function via synthesis and testing rather than developing a model of their function from first principles. In 
practice, these large-scale efforts are synergistic with modeling techniques because they provide systematic data that can strengthen models 
for predicting biological functions (Plesa et al., 2018). 
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BOX 2-1 

Designing Biology 

Design in biology has traditionally differed from design in other engineering disciplines. In particular, 
biological design in the past has typically involved building and testing many designs to identify those that 
have the desired effect. The need for this trial-and-error process stemmed in part from the tools that were 
available; sequencing, synthesis, and gene editing tools have historically been too inexact and labor- 
intensive to permit systematic exploration of biological design spaces. 

The complexity of biological systems makes it likely that biological design will continue to rely on trial 
and error, at least in part, for the foreseeable future. The balance between trial and error and explicit de¬ 
sign is determined by our ability to predict phenotypic results from genotypic editing. Despite the continued 
need for trial and error, as the “craft” elements of genetic modification have been replaced with standards 
and practices, the discipline of design has come to play an increasingly key role in identifying strategies 
for specifying and building libraries that outperform previous approaches. In some cases, natural evolution 
can be co-opted to optimize designs by passaging samples through multiple generations of animal models 
or other living systems, where a selective pressure will identify the best constructs. In addition, aspects 
of biological systems can be discretely modeled with increasing accuracy. Examples of such advances 
include models of ribosome binding site strength (Salis Lab, 2017) and protein folding (Baker Lab, 2017), 
systems biology models (Palsson Lab, 2017), and statistical design tools (CIDAR Lab, 2016). None of these 
tools eliminate the need to build or test biological systems, but they reduce the size of the effective design 
space that must be explored to make progress toward a design goal. As tools supporting the building and 
testing of biological products improve in precision and throughput, larger design spaces can be explored. 

The future of design in biology is expected to continue to separate the intent of the designer from 
the specification of genetic changes to make. Similar to the way that modern programming languages do 
not require software developers to understand how software routines are executed at the transistor level, 

In other words, a synthetic biologist may not need to know the exact sequence of nucleic acids required in 
order to design a regulatory circuit for gene expression—simply specifying a particular goal, for example, 
the desire to integrate two predetermined biological signals, may be sufficient to return a blueprint for the 
Build stage. Importantly, design tools are not restricted to base pair-level descriptions of genetic constructs 
as output; they may instead output instructions for libraries of designs to build and test (e.g., suggesting a 
range of sequences to vary expression level of a regulatory protein) or conditions for mutagenesis, evolu¬ 
tion, and selection (e.g., to augment rational design with directed evolution)—thus allowing the designer 
to more efficiently identify improved biological systems. 


reductions in costs and increases in the length of constructs that are attainable. These trends are likely to 
continue. 

• Genome engineering. Although in the past it has proven possible to engineer organismal or viral genomes 
via painstaking mutational methods, the ability to synthesize DNA quickly, coupled with improvements in 
transformation technologies and “booting” (the steps needed to go from DNA to a viable organism), has 
led to an acceleration in the ability to make mutations, including multiple mutations in parallel (e.g., Wang 
et al., 2009). In particular, the ongoing CRISPR revolution (Doudna and Charpentier, 2014) has led to the 
ability to introduce site-specific changes into a wide variety of organisms that may have previously been 
refractory to such techniques. 

• Improved computational modeling. With new approaches to modeling biological systems and improved 
computing power, more complex biomolecular designs and system behaviors can be explored. This allows 
for larger areas of the theoretical “design space” in biology to be explored and tested in parallel, leading 
to better working systems in less time. Modeling advances are abetted by new computational advances 
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in machine learning and big data that have allowed the results of past experiments (both successes and 
failures) to inform the next round of design and experimentation. In the future, the creation of “rules” from 
the machine learning process should greatly improve the specification of future successful designs. 

• Genetic logic. A key development in the field that meshes with improvements in modeling is the development 
of genetic logic circuits (Moon et al., 2012; Kotula et al., 2014) that allow living systems to make basic 
“decisions” based on both current inputs to the system (combinational logic) and the history of inputs 
(memory or sequential logic). The inherently programmable nature of genetic logic circuits is expected to 
mesh with advanced modeling approaches to improve the DBT cycle. An example of the use of genetic 
logic is plants that have been modified to act as radiation sensors capable of indicating when large amounts 
of gamma radiation have been detected (Peng et al., 2014). 

• Directed evolution. While directed evolution methods are not new, their application has been accelerated 
by recent advances in DNA synthesis and genome engineering and are thus addressed in this report under 
the umbrella of biotechnology in the age of synthetic biology. Directed evolution methods stand both 
as an alternative to design-based models and as a supplement to them, in that they can return enormous 
amounts of data on fitness landscapes that can further improve computational modeling approaches. 
Additionally, the combination of design and selection moves constructs well beyond the bounds of what 
nature would attempt while still allowing the facile repair of unintended unnatural or less-fit deficiencies 
and interactions. A somewhat notorious example of the use of directed evolution was the introduction of 
an engineered version of a more virulent strain of influenza virus into ferrets, where it rapidly evolved 
to become airborne-transmissible (Fouchier, 2015). While this research was done for reasons some argue 
were appropriate, it also provided a blueprint for potential misuse. 

Engineering Paradigms for Synthetic Biology 

Enabling technologies have allowed synthetic biologists to make genetic changes in organisms with greater 
ease, precision, and scale. As a maturing engineering discipline, synthetic biology is also being advanced by engi¬ 
neering paradigms that allow these tools to be used with greater predictability of result. Engineering paradigms are 
methods of adapting enabling technologies to abstraction, standards, computing, workflow optimization, and other 
engineering principles. If enabling technologies provide options for what tools will be used in synthetic biology, 
engineering paradigms describe how these technologies will be used. In other words, these paradigms encompass 
the processes and decisions followed in designing, building, and testing biological constructs. The following 
engineering concepts and paradigms are particularly relevant to the context of this study: 

• Specify-Design-Build-Test-Learn cycle. The Specify-Design-Build-Test-Learn cycle refers to an iterative 
process that requires a formal description of the desired biological behavior or function (Specify), the 
planned modification of an organism in silico or via rational design principles to realize that behavior 
(Design), the physical assembly of the biological material representing those designs (Build), the testing of 
the material to determine if it functions as specified (Test), and formally capturing and storing information 
about the entire process to inform the next revision or subsequent design (Learn). The boundaries between 
the cycle stages are fluid, and for the purposes of this report, the cycle is simplified to Design-Build-Test, 
with other stages implicitly included in these core elements. For example. Specify is incorporated into 
Design, and Learn is incorporated in the analytical steps of Test. Additional elements that are pertinent to 
biodefense considerations, such as Scale and Delivery, are also included. 

• Combinatorial approaches. Although not an engineering paradigm per se, it is a fundamental shift that 
in many cases, it is now often “cheaper to make than to think.” It is becoming increasingly common to 
use combinatorial approaches—approaches in which a large number of genetic variants are created and 
then tested. Variants can be created by using a technique in which a large number of DNA variants are 
incorporated systematically to synthesize multiple variants (i.e., combinatorial assembly). The concept is 
that one can generate a large number of variants with limited knowledge of sequence-function relationships. 
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These approaches enable many design options to be explored, even in the absence of predictive tools to 
model the performance of those designs. Directed evolution is a related concept, discussed in Appendix A. 

• High-throughput data acquisition. The speed of the DBT cycle has been greatly increased by the raft 
of enabling technologies such as combinatorial assembly (Smanski et al., 2014; Carbonell et al., 2016), 
CRISPR/Cas-based editing methods (Black et al., 2017; Schmidt and Platt, 2017; Mendoza and Trinh, 
2018), and directed evolution (Cobb et al., 2013; Tizei et al., 2016). By synergizing with advances in 
analytical chemistry and biology, such as microfluidics and high-throughput sequencing, these technologies 
may allow the functional assessment of millions of constructs in parallel, hence providing particularly 
robust feedback for the next iteration of design. 

• Separation of design and manufacturing. Specifying and designing a system can now be done in one 
location (e.g., an academic environment) while the manufacturing process (the Build step in the DBT 
cycle) is done in another location (e.g., a remotely operated facility or “cloud laboratory”). The increasing 
physical and virtual separation of design and manufacturing not only further increases the accessibility of 
synthetic biology but also creates potential security concerns where designs cannot necessarily be explicitly 
connected to manufacturing locations and vice versa. 

• Standards. Standards have emerged that make DNA assembly easier and parts more “sharable” (e.g., Gibson 
and modular cloning assembly methods). Data standards such as Synthetic Biology Open Language 4 have 
made the sharing, analysis, and software ecosystem of synthetic biology increasingly sophisticated. Such 
standards may ultimately allow engineers to focus on raising the level of abstraction in designs since lower- 
level mechanisms have been well defined and vetted. 

SPECIFIC SYNTHETIC BIOLOGY TECHNOLOGIES AND APPLICATIONS 

The technologies and engineering paradigms described above have led to a number of applications that drive 
synthetic biology development because they provide unique ways to take advantage of what synthetic biology 
offers. They are not all unique to synthetic biology, nor are they all routinely used to explore synthetic biology 
designs. For example, all synthetic biologists use software to store and analyze DNA sequences and use some form 
of computation in specifying designs (e.g., using biophysical models or algorithms to design ribosome binding sites, 
to check folding energies of DNA primers used for amplification and assembly, or to refactor the DNA sequence 
encoding a protein to increase protein production, a technique known as “codon optimization”). However, far 
fewer have the requisite library of DNA parts and accompanying software tools to achieve a level of abstraction 
that would allow the researcher to query, for example, a logic gate that accepts glucose concentration as input and 
activates transcription of a tethered reporter when a specific concentration is achieved. In other words, there are 
approaches and tools that are continuing to develop and gain traction within synthetic biology but which have not 
necessarily reached their full technical potential or user adoption. 

Although the technologies used in each of the component phases of the DBT cycle may evolve over time 
or be replaced by new technologies, the fundamental concepts of the DBT cycle will stand. Thus, it is useful to 
consider current technologies and anticipated future developments in terms of the ways in which they enable the 
DBT cycle. However, it is important to recognize that the component phases of the DBT cycle are not strictly 
separate. It is possible, even probable, that some technologies or approaches will have impacts across multiple 

or in cell cultures under stress permits nature to Design, Build, and Test new phenotypes. There are also likely 
areas in which advances in synthetic biology capabilities relevant to biodefense would arise from synergies or 
convergence among technologies relevant to different phases. For example, it is important to consider potential 
synergies between Design technologies and Build technologies, because a malicious actor would need both Design 
and Build capabilities to carry out an attack. Similarly, synergies may arise if large-scale Test technologies are 
developed to match the enormous output of certain Build technologies, thus helping those Build technologies 
reach their full potential. 


4 See http://sbolstandard.org. Accessed November 9, 2017. 
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TABLE 2-1 Synthetic Biology Concepts, Approaches, and Tools That Enable the DBT Cycle 

Key Synthetic Biology Concepts, Approaches, and Tools Design Build Test 

Automated biological design 

Metabolic engineering 

Phenotype engineering 

Horizontal transfer and transmissibility 

Xenobiology 

Human modulation 

DNA construction 

Editing of genes or genomes 

Library construction 

Booting of engineered constructs 

High-throughput screening 

Directed evolution 

NOTE: Shading indicates which phase of the DBT cycle each example aligns with most closely. See Appendix A for full descriptions. 


Appendix A describes a core set of current synthetic biology concepts, approaches, and tools that enable each 
step of the DBT cycle, focusing particularly on areas in which advances in biotechnology may raise the potential 
for malicious acts that were less feasible before the age of synthetic biology. Although the examples presented are 
intentionally quite broad and somewhat arbitrary—and do not represent an exhaustive list of all technologies or 
all possible applications of synthetic biology—they provide useful context for understanding how specific tools 
or approaches might enable the potential capabilities analyzed in Chapters 4—6 and can be adapted to assess new 
areas of concern as the biotechnology landscape continues to evolve. In addition, although Appendix A captures 
the main known technologies at the time of writing, this list will need to be updated and modified to stay relevant 
as the science advances. 

Table 2-1 summarizes how the concepts, approaches, and tools described in Appendix A map to the phases 
of the DBT cycle. Going forward, it will be useful to consider how each phase of the DBT cycle may be further 
enabled by future developments in technology and knowledge, particularly in areas where a current bottleneck 
may be overcome. Appendix A also indicates the relative degree of maturity of specific techniques discussed (see 
Figure A-l). 
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Framework for Assessing Concern About 
Synthetic Biology Capabilities 


The U.S. Department of Defense asked the National Academies of Sciences, Engineering, and Medicine to 
“develop a strategic framework to guide an assessment of potential security vulnerabilities related to advances in 
biology and biotechnology, with a particular emphasis on synthetic biology.” In public meetings, Department of 
Defense representatives clarified that the primary purpose of the framework was to serve as a tool to aid the con¬ 
sideration of the relative level of concern indicated for current and future synthetic biology-enabled capabilities.® 
was determined that the framework needed to be flexible enough to be applied in a variety of circumstances and for 
a variety of purposes, such as: analyzing existing capabilities to evaluate the level of concern indicated at present; 
understanding how various capabilities compare to, interact with, or complement each other in terms of their level 
of concern; identifying key bottlenecks and barriers that, if removed, could lead to a change in the relative level 
of concern; evaluating the change in the level of concern warranted when new experimental results are reported 
or new technologies arise; and horizon-scanning to predict or prepare for potential future areas of concern. This 
chapter describes the development of the framework and how it was used to facilitate an expert-based qualitative 
ranking of capabilities based on a well-defined set of factors to capture relative levels of concern. 

APPROACH TO DEVELOPING THE FRAMEWORK 

The process used to develop the framework generally followed best practices in expert elicitation and elici¬ 
tation of attributes and value functions for multiattribute modeling (Morgan and Henrion, 1990; Clemen, 1991; 
Keeney, 1992; Keeney and Raiffa, 1993). First, the existing frameworks listed in Appendix B were reviewed, along 
with other published literature, to develop a list of factors that have been identified as being relevant to assessing 
concerns about the use of synthetic biology. A number of different frameworks have been developed to assess con¬ 
cerns associated with emerging technologies. In biology, these frameworks have typically assessed concerns based 
on features and capabilities of the biotechnology itself, particularly the capabilities the technology may provide to 
someone who would wish to create harmful biological entities for a specific malicious use. Some frameworks also 
consider the severity of potential adverse outcomes and the ability to manage them through detection, mitigation, 
or attribution. Other work has focused on assessing concerns associated with particular types of experimentation 
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Usability of the Technology 

• Ease of use 

• Rate of development 

• Barriers to use 

• Synergy with other technologies 



Requirements of Actors 

• Access to expertise 

• Access to resources 

• Organizational footprint requirements 


Potential for Mitigation 


• Deterrence and prevention capabilities 

• Capability to recognize an attack 

• Attribution capabilities 

• Consequence management capabilities 



FIGURE 3-1 Framework for assessing concern. NOTE: The framework consists of four factors, along with descriptive ele¬ 
ments within each factor, which delineate the information used to assess the level of concern for particular synthetic biology- 
enabled capabilities. 


that may provide generalizable features applicable to a broader set of technological dual-use concerns. 1 Another 
framework approach, typically employed by security groups, is to use scenario-based assessments to identify 
potential vulnerabilities and the potential ways to mitigate them. Often referred to as “red-teaming,” this approach 
uses vignettes to describe details of a hypothetical scenario such as specific agents, actors, and affected popula¬ 
tions. Although this approach can be informative, some scenario-based frameworks are hampered in the context 
of biodefense by a lack of evidentiary case studies and by the fact that one can come up with an almost limitless 
list of malicious activities that could potentially be pursued with biology (Lindler et al., 2005), and so the work 
is, by definition, never complete or comprehensive. 

This review of the literature was followed by a process to identify terminology, factors, and approaches 
that resonated most within the context of the study charge. The outcomes of that process were formalized into 
a set of factors and elements within each factor, summarized in Figure 3-1 and described in more detail below. 


1 As defined by the National Science Advisory Board on Biosecurity, “Research yielding new technologies or information with the potential 
for both benevolent and malevolent applications is referred to as ‘dual use research.’” See https://osp.od.nih.gov/biotechnology/nsabb-faq. 
Accessed November 15, 2017. 
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These factors delineate the information that would be used to assess the level of concern for particular synthetic 
biology-enabled capabilities. 

Developing quantitative or fixed scales for these factors was not attempted, nor was there an attempt to weight 
the factors relative to each other in terms of importance or impact on level of concern. Many of the factors and 
their descriptive elements are interdependent in that they capture ideas that are similar to or overlap with other 
factors and descriptive elements and are thus correlated with each other, requiring complex considerations for 
quantification. Instead, a qualitative approach was taken, using the factors and their descriptive elements to guide 
discussions and inform the assessment of relative level of concern for various synthetic biology capabilities. The 
assessment of each individual capability then fed into a holistic, relative ranking of the capabilities in terms of 
level of concern, similar to the methodology used in other studies (Morgan et al., 2001; Willis et ah, 2004, 2010). 

FACTORS FOR ASSESSING CONCERN 

The framework for assessing concern consists of four factors, along with descriptive elements within each 
factor, as represented in Figure 3-1. The factors are usability of the technology, usability as a weapon, requirements 
of actors, and potential for mitigation. Conclusions about the relative level of concern about any particular syn¬ 
thetic biology capability are influenced by these four factors; in other words, capabilities that have lower technical 
barriers to use, more qualities that would enable use as a weapon, low actor requirements in terms of expertise 
or resources, and a low likelihood of mitigation would be of relatively more concern than capabilities for which 
there are high technical barriers to use, fewer qualities that would enable use as a weapon, high actor requirements 
in terms of expertise and resources, and a high likelihood of mitigation. As represented in this framework, those 
are the two extreme ends of the spectrum of concern. To complement and expand on the factors and descriptive 
elements. Appendix C lists illustrative questions that arose during the study process that can help facilitate the 
use of the framework. 


Usability of the Technology 

Biotechnology is a fast-moving field, and in some ways, synthetic biology is accelerating and broadening 
the usability of tools to achieve various capabilities. The first factor in the report’s framework, usability of the 
technology, captures the idea that as tools become more usable, they become more accessible to more people, and 
therefore the concern about them being deployed for malicious use increases. 

Four main elements were included in this study’s assessment of the usability of technologies: ease of use, rate 
of development, barriers to use, and synergy with other technologies. Rather than attempting to formally score 
each of these elements for each capability analyzed, these elements were incorporated into one overall assessment 
of the usability of the technology for each capability considered. 


If a technology is easier to use, it is more likely to be used. Technologies that are in common use are likely to 
be more accessible and therefore more vulnerable to misuse, though it is also important to consider how outdated 

Advances in technology have made it easier to perform such tasks as creating single-nucleotide modifications 
and adding genes. Applications that employ combinatorial approaches to generate and test multiple design variants 
often involve complex work at large scales—as well as a high degree of unpredictability—thus putting them at 
the more difficult end of the spectrum. The availability of detailed information about a specific gene or pathway 
of interest also affects how easy or hard it is to use available technologies to manipulate that gene or pathway. 
These are the types of considerations that analysts can use to determine how much concern is warranted based on 
the ease of use of the technologies needed for a given application. 
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Rate of Development 

All technologies follow some form of development curve over time. Technological capabilities that are devel¬ 
oping rapidly are generally of more concern than those that are still far off in the future. If there is a known com¬ 
mercial use for a technology, private-sector investments may accelerate the rate of development, while technologies 
that do not have an identified commercial value may follow a slower path, advancing through smaller, disconnected 
efforts and public funding. Novel technologies may be characterized by rapid improvements in accuracy and 
throughput as their developers try to establish new markets or compete in existing ones. Technologies that have 
filled a unique market niche may survive for a long time with only minor improvements in scale or reductions in 
cost (e.g., the polymerase chain reaction, or PCR, has been in use for decades), while other technologies lose their 
prominence after being displaced by innovations (e.g., next-generation sequencing, also known as high-throughput 
sequencing, allows large numbers of genetic sequences to be determined far more rapidly than previous sequencing 
technologies and is expected to replace older technologies in some molecular identification applications). 

Technologies for the synthesis of ever-larger DNA constructs are currently evolving rapidly, as are technolo- 

another area that is maturing rapidly. Assessing the degree to which the rate of development affects the level of 
concern warranted for a given use of technology should include consideration of both the pace of the technology’s 


Barriers to Use 

It is also important to consider the presence of significant bottlenecks or barriers, which can lower the likeli¬ 
hood that a technology will be used. For example, key gaps in one aspect of the Design-Build-Test (DBT) cycle, 
such as Design knowledge, can significantly limit the potential for malicious use of a given technology and con¬ 
sequently lower the level of concern related to how that technology might be used in another phase of the DBT 
cycle, such as Build. Identifying barriers can also provide insight into potential rapid changes in what may be 
achievable once those barriers are overcome. This is an especially important consideration in areas of synthetic 
biology with strong drivers (e.g., beneficial uses attracting significant research) that are pushing the barriers to 
be broken. Major technological leaps have the potential to change synthetic biology quickly and open up new 
possibilities; for example, Gibson Assembly® (Gibson et al., 2009) led to a sea change in the ability to compile 
genetic fragments. 


Synergy with Other Technologies 

Some technologies may be substantially enhanced by synergies with other technologies, leading to higher level 
of concern for the capabilities they may enable. For example, CRISPR/Cas9 can be used alone to make a specific 
modification to a targeted gene. But when CRISPR/Cas9 is coupled with emerging technologies for single-cell 
sequencing, it is possible to create random libraries of CRISPR/Cas9 guide RNAs, apply them in parallel to single 
cells, subject the cells to environmental pressures, and use single-cell next-generation sequencing to identify the 
“winners” (Datlinger et al., 2017)—a far more complex proposition than could be achieved with CRISPR/Cas9 
alone. 

In the field of computing, the semiconductor technology evolution has brought ever-greater computing power 
and data storage at ever-lower costs. At the same time, the evolution of networking technology has converged with 
computing to make computing more ubiquitous, powerful, and inexpensive, thanks in part to a concerted effort to 
identify and overcome bottlenecks and barriers in both computing and networking. Synthetic biology and sequenc¬ 
ing technology may well show a similar convergence in the coming years, in which advances in annotation and 
predictable sequence-structure-function relationships lead to the ability to reliably design increasingly complex 
biological systems (Brophy and Voigt, 2014; Chao et al., 2015). 

Such developments would have implications for both beneficial and malicious uses of synthetic biology 


Copyright National Academy of Sciences. All rights reserved. 


Biodefense in the Age of Synthetic Biology 


FRAMEWORK FOR ASSESSING CONCERN ABOUT SYNTHETIC BIOLOGY CAPABILITIES 


27 


technology. In determining the level of concern warranted for any given capability, it is useful to consider how 
synergies among relevant technologies may create opportunities for new types of applications in the future. It is 
also useful to consider how a breakthrough relevant to one aspect of the DBT cycle might synergize with technolo¬ 
gies relevant to other aspects to enable applications that were not previously achievable. 

Usability as a Weapon 

A central question is whether a capability enabled by synthetic biology can be used in such a way as to cause 
harm—that is, whether a capability can be used as a weapon. A great deal of previous work has sought to char¬ 
acterize what makes a substance “weaponizable” (Kadlec and Zelicoff, 2000; U.S. Congress, 2006; Cams, 2017). 
Drawing on that work, usability as a weapon was identified as a primary factor in the framework for assessing 
concerns related to synthetic biology-enabled capabilities. A capability determined to have more characteristics 
that make it usable in the development of a weapon warrants a higher level of concern than a capability with fewer 
characteristics for that purpose. In particular, the elements considered as part of usability as a weapon include 
implications for production and delivery of a weapon, the expected scope of casualty for a given use of technol¬ 
ogy, and the predictability of the intended results. 


Production and Delivery 

There are two types of questions to consider with regard to the production and delivery of weapons created 
with synthetic biology. They build upon a large body of existing work related to the classical understanding of the 
use of pathogens to create weapons of mass destruction. Previous frameworks for understanding threats related to 
bioweapons outline a series of key steps involved in creating a bioweapon and using it in an attack. These steps 
include bioagent production, stabilization, testing, and delivery (van Courtland Moon, 2006) and might include 
specific processes such as growing large amounts of an agent, milling it into a powder form, making the agent stable 
enough to be sprayed in a crop duster or withstand other means of mass dispersal, and testing its effectiveness in 
animal studies. These steps were considered significant barriers to the production of bioweapons in the Cold War 
era, in effect limiting bioweapons capabilities to a few well-resourced nation-states. In assessing the biodefense 
concerns posed by biotechnology, it is important to consider (1) whether synthetic biology could lower the bar¬ 
riers related to bioagent production, stabilization, testing, and delivery or (2) whether advances in biotechnology 
areas other than synthetic biology may impact the potential to weaponize products created with synthetic biology. 

The first item has to do with whether synthetic biology makes unnecessary any of the classically defined steps 
to weaponization and thus eliminates barriers previously associated with that step. For example, synthetic biology 
could potentially be used to enhance existing pathogens or create new ones, but it also raises the possibility of 
types of attacks in which the “weapon” involved is not a pathogen per se, but a genetic construct, toxin, or other 
entity. Deploying such alternative bioagents might not require the same type of large-scale production or purity 
of pathogens required for some traditional bio weapons. In addition, synthetic biology could raise concerns about 
smaller types of attacks that do not require mass dispersal, which could change the equation with regard to the need 
for stabilization. All of these elements could potentially reduce or eliminate barriers that previously were thought 
to hinder the use of bioweapons, so their presence would generally increase the level of concern. 

The second item relates to how advances in other areas may impact the potential to weaponize products created 
with synthetic biology. For example, it may be important to consider how advances in technologies such as bioreac¬ 
tors 2 may change the nature of the production facilities required to produce harmful agents using synthetic biology. 


2 Bioreactors are vessels in which biologically active substances produce substances or biological components, a type of biotechnology that 
is not exclusive to synthetic biology. 
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Scope of Casualty 

The scope of casualty it is possible to generate by using a synthetic biology capability to create a weapon 
gives a sense of the scale of the potential threat it poses. For capabilities that could lead to a large number of 
people impacted and/or a severe outcome like permanent disability or death, the concern level would be higher. 


Predictability of Results 

Predictability of results describes the degree to which a malicious actor could be confident that the intended 
result will be achieved when using a given technology to develop a weapon. A higher degree of predictability 
would be associated with a higher level of concern. While some technologies, applications, and types of attack 
may require extensive testing in order to ensure the intended impact, there may be a lower barrier to success if, 
for example, the bioagent would only need to be produced one time to have the desired outcome, if the attacker 
has the opportunity to deliver the agent multiple times, or if the attacker can create many versions of the agent to 
maximize the likelihood of success. To assess the overall predictability of results for the malicious use of synthetic 
biology, it is useful to consider both a need for testing and phenotype predictability. 


Testing A large-scale, long-term, and highly resourced bioweapons operation could likely be expected to perform 
testing prior to deployment to ensure that the scaled-up bioagent behaves as intended and that the delivery or 
dissemination method is functional. This process would typically involve testing in animal models to ensure illness 
or lethality, as well as field testing in specific environments to ensure that the agent survives well enough to persist 
and infect targets. In the context of a synthetic biology-enabled weapon, it is useful to consider the degree to 
which testing would be necessary for a given use and how this testing might be carried out. If significant testing 
is not likely to be necessary, the concern would be higher. 

Phenotype Predictability A related question is whether the genotype of a bioagent could be predictably engineered 
to yield the desired phenotypes. For example, are there known engineering strategies or preexisting research that 
outlines methods to predictably produce the desired result? Or can the properties of a bioagent be modeled with 
computational tools? The ability to predictably design, model, or construct an agent could reduce the need for 
testing. Agents with predictable genotype-phenotype relationships may also require fewer resources to deploy, 
since it may not be necessary to test multiple genotypes to obtain the desired phenotype. Therefore, as phenotype 
predictability increases, so does the level of concern. 


i^^julremenlsMfiSlorS 

Any discussion of the concerns related to the potential malicious use of a specific biotechnology needs to 
include consideration of requirements of the person or people who would be involved in perpetrating an attack, 
here referred to as actors. Actors may range from a single individual to a dedicated team to a government body. 
They may be amateurs, biotechnology experts, or engineers or have some other type of relevant expertise. The 
complexity involved in exploiting a technology (see Usability of the Technology, above) will have varying impacts 
on the likelihood of use and therefore on the level of concern, depending on the capabilities of the actors. For 
example, whereas it may be impractical (or would take an extremely long time) for an individual actor to gain the 
necessary capabilities and knowledge to use a given capability to cause harm, a dedicated team might have the 
diversity of expertise necessary to enact the same plot much more quickly. 

When analyzing how the requirements of actors affect the level of concern about a given capability, it is 
useful to consider questions related to the expertise an actor would need to possess to effect a given attack, the 
accessibility of the required resources, and the organizational footprint and infrastructure that would be required. 
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In addition, while this study did not include consideration of the intents or actual capabilities of actors, which 
would likely have required access to classified information, such information could, in the future, be incorporated 
into an assessment of vulnerabilities to inform decision making. 


Some types of applications of biotechnology require a great deal of expertise in one or more areas, while other 
uses may require less expertise. The degree to which expertise requirements represent a barrier to malicious use of 
a technology depends on the expertise possessed (or obtainable) by a malicious actor. It is important to assess the 
gap between the types of expertise required and the types of expertise that actors might be expected to have access 
to. In some cases, exploiting synthetic biology for harm may require an actor to interact with the conventional 
research community to acquire goods, services, or expertise, in which case the concern would be lower because 
this would be a barrier that may enable malicious use to be detected earlier. 


Access to Resources 

The particular resources needed to effect a given malicious use of synthetic biology depend on many factors. 
Resource requirements can include money, time, laboratory equipment and other infrastructure, reagents and other 
raw ingredients, personnel and expertise, and other types of resources. If more resources are needed, the concern 
level is decreased because that reduces the number of potential actors. If fewer resources are needed, then there 
is a higher level of concern. 

There are multiple, hypothetical ways for an actor to obtain resources. For example, if an actor requires the 
use of an expensive DNA synthesizer but lacks sufficient funds to purchase a new instrument via conventional 
channels (or fears an outright purchase would lead to discovery), the actor may consider purchasing a used synthe¬ 
sizer, obtaining legitimate or covert access to equipment at a company or university, coercing an innocent person 
with legitimate access to perform the work (via bribing, subversion, blackmail, or threats of harm), or resorting to 
outri ght the ftl.'A solo actor could be better funded than a group sponsored by a poor nation-state. Conversely, a poor 
but resourceful actor might find ways to access even highly sophisticated technologies, for example, by enrolling 
in a graduate degree program, getting a job in a biotechnology company, or taking advantage of relevant service 
providers or brokers of services. Assessing needed access to resources is not always a straightforward proposition, 
but it is nonetheless an important consideration when evaluating potential concerns. 


Organizational Footprint Requirements 

If achieving a particular malicious use of synthetic biology requires a large organizational footprint, the concern 
will be lower compared to capabilities for which only a small organizational footprint is needed. Some malicious 
uses of synthetic biology might be achievable by an individual working with basic supplies and a rudimentary 
laboratory, whereas other types of attacks might require a larger organization, more personnel, or more extensive 
infrastructure. Furthermore, considering the organizational footprint that would be required to effect a given type of 
attack can shed light on the relative importance of other actor attributes, such as access to resources. Organizational 
footprint also affects considerations related to the potential for mitigation, such as the ability to identify suspicious 
activity and prevent an attack or the ability to attribute an attack to the actor responsible (discussed further under 
Capability to Recognize an Attack and under Attribution Capabilities, below). For example, activities requiring 
less equipment may be able to be pursued by actors with fewer resources and may be conducted in a clandestine 
laboratory, making detection or attribution more difficult and therefore making concern higher. Malicious uses 
requiring a large organizational footprint, on the other hand, might require an actor to have access to more funding 
or access to legitimate infrastructure (such as by being embedded within a university laboratory), increasing the 
likelihood of detection or attribution and leading to a lower level of concern. 
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Potential for Mitigation 

The impact of an attack depends both on the actor’s ability to deploy a weapon and on the target’s ability 
to prevent, detect, respond to, or withstand the attack. To comprehensively assess concerns, it is important to 
consider mitigating factors that may diminish the likelihood that a synthetic biology capability will be effectively 
used to cause harm or that may reduce the damage caused. Elements within this factor include the ability to deter 
or prevent an attack, the ability to recognize when an attack has occurred, the ability to trace an attack to the 
responsible actor (or “attribute” an attack), and the ability to manage the consequences of an attack. Because this 
factor is a core part of the framework, considerations related to the potential for mitigation were included in the 
assessments of specific capabilities presented in Chapters 4-6; however, significant data gathering on U.S. mitiga¬ 
tion capabilities was outside of the study scope and the assessments presented in those chapters are intended to be 
illustrative and to demonstrate the assessment process rather than provide a full analysis. Mitigation capabilities 
are also discussed further in Chapter 8. 


Deterrence and Prevention Capabilities 

Various factors can affect the likelihood that a malicious actor will decide to pursue an attack and then suc¬ 
cessfully execute it. One important element that is understood to deter adversaries from pursuing some types of 
biological attacks is the availability of countermeasures that limit the amount of harm an attack would cause. For 
example, the fact that the United States has smallpox vaccine stockpiled —and would thus have a ready counter¬ 
measure against an attack using smallpox—is expected to deter malicious actors from perpetrating attacks using 
smallpox. 

One approach that has been used as a preventive measure is the establishment of regulatory and statutory 
safeguards that limit the ability to access particular pathogens or technologies and use them for harm. For example, 
by limiting access to certain pathogens, the Federal Select Agent Program is intended to reduce the likelihood of 
those pathogens falling into the hands of malicious actors who might seek to use them as a weapon. 

In addition, activities such as intelligence gathering can contribute to deterrence and prevention by increasing 
the capacity to identify suspicious activities and intervene before an attack takes place, or to catch and punish an 
actor after an attack has occurred, as discussed under Capability to Recognize an Attack and under Attribution 
Capabilities, below. Intelligence gathering allows authorities to recognize and respond to activities that may indicate 
that an actor is preparing for a biological attack, such as by monitoring individuals or groups with a known intention 
to carry out an attack, monitoring individuals or groups with access to equipment or expertise necessary to develop 
a bioweapon, or tracing the procurement of supplies that could be used in a biological attack. However, because 
biotechnology is used for so many beneficial applications and because different combinations of technologies can 
be used for the same or different purposes, it can be challenging to identify activities, specialized equipment, or 
other signatures that distinguish suspicious activity from benign activity. 


Capability to Recognize an Attack 

In general, there is a higher level of concern about attacks that would require some time and work to identify 
(as a health threat and/or as a purposeful attack) compared with attacks that would be readily recognizable. Once 
an attack has occurred, recognizing the emergence of an unusual cluster of disease is the first crucial step toward 
launching an effective response. In addition, being able to differentiate between a natural disease outbreak and 
purposeful use of a bioagent is vital to preventing subsequent attacks and finding the perpetrators. This knowledge 
also can inform how medical personnel, public health organizations, and law enforcement or military authorities 
act to contain the scope of the damage. Public health programs and disease surveillance systems such as those 
under the purview of the U.S. Centers for Disease Control and Prevention are designed to facilitate the rapid iden¬ 
tification and characterization of known infectious disease threats as they emerge. It is important to consider how 
synthetic biology might affect the ability to identify suspicious activity, recognize when an attack has occurred, 
and identify the individuals or groups that have been targeted. 
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Attribution Capabilities 

The ability to attribute an attack to the actors responsible is crucial to consider as part of the framework, 
because attribution may provide a disincentive to attacks in some circumstances. That is, actors may choose 
different courses of action if their actions could lead to prosecution or retaliation; thus, there is a higher level 
of concern about attacks that would be more difficult to attribute. Attribution considers scientific evidence, its 
validation, and nonscientific types of information. In the future, it may be important to consider how attacks that 
use synthetic biology approaches could conceivably be amenable to the development and validation of different 
lines of molecular evidence. Such potential opportunities are discussed in Chapter 8, such as next-generation DNA 
sequencing and analysis of “scars” left by engineering techniques (e.g., a remnant of a DNA vector used to insert 
synthetically derived biological components). 


Consequence Management Capabilities 

Protocols and procedures for responding to public health emergencies and to biological and chemical attacks 
exist in both the civilian and military arenas (CDC, 2001,2017d). These procedures often involve, for example, 
epidemiological methods of identifying victims, agents, and modes of transmission, as well as activities such as 
the development and use of vaccines, drugs, and antitoxins to save lives. Other relevant capabilities include emer¬ 
gency response capacity, availability of supportive healthcare facilities, and effective procedures for isolation and 
quarantine. When assessing the level of concern about any particular capability, it is important to understand how 
that capability could change the ability to mitigate the negative impact of an attack. 

APPLYING THE FRAMEWORK IN THE ASSESSMENT OF CONCERN 

The framework was developed both to facilitate the analysis of synthetic biology-enabled capabilities pre¬ 
sented in subsequent chapters of this report, as well as to aid others in their consideration of current and future 
synthetic biology capabilities. To support and inform the application of the framework by other parties, this section 
describes the approach taken to identify potential areas of concern, the steps used to apply the framework, and key 
considerations that guided the analysis. 

Approach Taken to Identify Potential Areas of Concern 

A number of technologies support various aspects of the synthetic biology Design-Build-Test cycle; selected 
examples are captured in Appendix A. The interim report (National Academies of Sciences, Engineering, and 
Medicine, 2017a) released as part of this study identified these technologies as potential items for which the 
framework could be used to assess concern. However, the technologies themselves pose no inherent harm, and it 
would generally take a collection of technologies to create a specific capability that warrants concern. As a result, 
this final report describes how the framework was applied to assess capabilities (rather than technologies) that 
potentially pose a concern because of the harm they might enable. 

A list of potential capabilities to evaluate was identified by gathering a range of possibilities that have been 
mentioned in various venues as potential concerns associated with synthetic biology and augmenting that list with 
additional possibilities that had not been previously raised. These potential capabilities were grouped into catego¬ 
ries to ensure a consistent approach to their evaluation using the framework. The following potential capabilities 
were analyzed (see Chapters 4—6): 

• Re-creating known pathogenic viruses: Constructing a known, naturally occurring pathogenic virus from 
the starting point of information about its genetic sequence. 

• Re-creating known pathogenic bacteria: Constructing a known, naturally occurring pathogenic bacterium 
from the starting point of information about its genetic sequence. 

• Making existing viruses more dangerous: Creating a modified version of a known virus in which one or 
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• Making existing bacteria more dangerous : Creating a modified version of a known bacterium in which one 
or more traits have been altered to make the bacterium more dangerous. 

• Creating new pathogens'. Constructing a pathogen from the novel combination of multiple parts, which 

• Manufacturing chemicals or biochemicals by exploiting natural metabolic pathways'. Producing a naturally 
occurring product, such as a toxin, 3 by engineering an organism (e.g., bacterium, yeast, or alga) to contain 
the known biosynthetic or metabolic pathway for the desired product. 

• Manufacturing chemicals or biochemicals by creating novel metabolic pathways: Creating a new 
biosynthetic pathway that enables an engineered organism to produce a chemical that is not normally 
produced biologically. 

• Making biochemicals via in situ synthesis: Engineering an organism, such as a microorganism that can 
survive in the human gut, to produce a desired biochemical and delivering this microorganism in such a 
way that it can produce and release this product in situ. 

• Modifying the human microbiome: Manipulating microorganisms that form part of the population living 
on and within humans—for example, to perturb normal microbiome functions or for other purposes. 

• Modifying the human immune system: Manipulating aspects of the human immune system, for example, 
to upregulate or downregulate how the immune system responds to a particular pathogen or to stimulate 
autoimmunity. 

• Modifying the human genome: Creating changes to the human genome through addition, deletion, or 
modification of genes or through epigenetic changes that modify gene expression. A subset of this category 
is the modification of the human genome through human gene drives , the incorporation of certain types of 
genetic elements into the human genome that are designed to pass from parent to child during reproduction 
and that would spread a genetic change through the population over time. 

Steps Used to Apply the Framework 

The framework is designed to facilitate a thorough analysis of any particular capability by providing a set of 
key factors to consider and specific elements to consider for each factor. To inform decisions, however, it is useful 
to consider capabilities in relation to each other, that is, to assess areas of concern in relation to other potential 
concerns. To that end, the framework was applied using the following steps, which can be followed by other, 
future framework users: 

1. Gather and organize information about a capability in terms of the four framework factors and the elements 
relevant to each factor. 

2. Compare information about the capability to information about other capabilities to determine how the 
level of concern for a given capability compares to the level of concern for other capabilities. 

3. Consider all capabilities holistically, using the framework to inform judgments about relative levels of 
concern, based on all the information generated in steps 1 and 2. 

Different types and levels of expertise may be required to successfully analyze the factors and elements related 
to any particular capability. This committee benefited from a wide range of expertise areas, including synthetic biol¬ 
ogy, microbiology, computational tool development, bioinformatics, biosafety, public health, and risk assessment. 

For the first step, a qualitative approach was used to “score” each capability on each factor using a relative 
scale from low to high. For example, for the factor usability of the technology, the scale ranged from relatively low 
usability (which corresponds to relatively lower concern because it is relatively more difficult to use) to relatively 
high usability (which would be of relatively higher concern because it is relatively less difficult to use). 

Figure 3-2 shows the first step in the process using an illustrative example. For the first capability, “Capabil¬ 
ity 1,” information associated with the elements relevant to the first factor, usability of the technology (which 


The phrase “chemical or biochemical” throughout the report includes toxins. 
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Capability 1 



Relatively Low Usability Relatively High Usability 

(more difficult to use) (less difficult to use) 


FIGURE 3-2 Capability 1 assessed with regard to usability of the technology. 


includes ease of use, rate of development, barriers to use, and synergies with other technologies) was discussed and 
analyzed. Using that information, Capability 1 was placed on a relative scale ranging from low to high usability. 
Capability 1, the first capability discussed, was placed near the middle of the scale. 

Next, another capability, “Capability 2,” was placed on the scale. To do this, each of the elements for the 
usability of the technology factor were discussed for Capability 2 and compared to those elements for Capability 1. 
A facilitated discussion was used to place Capability 2 on the scale relative to Capability 1 (see Figure 3-3). Note 
that the bar for Capability 2 is wider than the bar for Capability 1 in order to represent a broader range of concern 
regarding usability of the technology for Capability 2. 

Each capability was considered in turn, with available information on each of the elements carefully discussed, 
reviewed, and compared to the corresponding elements for other capabilities, to place the remaining capabilities 
on the scale, as shown in Figure 3-4. 

This process was repeated for each capability and each factor (Usability of the Technology, Usability as a 
Weapon, Requirements of Actors, and Potential for Mitigation). As the work progressed, the definitions of some of 
the factors and capabilities were refined, and adjustments were made to the assessments based on those refinements. 

To help translate these graphics into usable information, five categories were created along the x axis: high, 
medium-high, medium, medium-low, and low. These categories are intended to reflect relative levels of concern, 


Capability 1 
Capability 2 



Relatively Low Usability Relatively High Usability 

(more difficult to use) (less difficult to use) 


FIGURE 3-3 Capability 1 and Capability 2 assessed with regard to usability of the technology. 
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Capability 1 
Capability 2 
Capability 3 
Capability 4 
Capability 5 
Capability 6 







Relatively Low Usability Relatively High Usability 

(more difficult to use) (less difficult to use) 


FIGURE 3-4 All capabilities assessed with regard to usability of the technology. 


not absolute levels of concern. No numerical scores were assigned to these categories and there was no attempt 
to normalize categories across factors (that is, to ensure that “medium” on one factor meant the same thing as 
“medium” on another factor) because such steps were not necessary for their use. Rather, capabilities were placed 
in the same category when they were seen as similar with regard to that factor. Not requiring the categories to 
have numerical meaning made it more straightforward to achieve agreement among the experts on the committee, 
with no loss of value in the information generated since all of the judgments were relative. 

As a final step, all of this information was integrated into a holistic assessment of the relative levels of con¬ 
cern across the full landscape of capabilities considered. Chapter 9 presents the results of this holistic assessment 
(see Figure 9-1). 


Key Considerations That Guided the Assessment 

As described above, an expert-driven, qualitative, multiattribute methodology was used to develop the 
framework and apply it to assess concerns associated with synthetic biology capabilities. There are strengths and 
weaknesses of any methodology. The following considerations guided the assessments presented in this report and 
could help inform future users of the framework: 

1. The factors were consistently applied. Care was taken to ensure that the factors were consistently used 
and appropriately incorporated into an assessment of overall level of concern. Each factor was reviewed 
separately for each capability and the entire list of capabilities was reviewed as part of the process of 
determining where each one belonged on the relative scale from “lowest concern for this factor” to “highest 
concern for this factor.” These graphs did not have absolute values but were maintained in relative terms, 
so that each capability was assessed relative to the others with regard to each factor. This approach reflects 
the level of precision that was included in the deliberations about the capabilities. 

2. The final assessment incorporates a holistic evaluation. A holistic consideration of relative concern is a 
critical part of ensuring that the final ranking captures the full extent of the input from the ranking process. 
The relative placement of each capability on the scale of each factor is not deterministic of the final ranking, 
but rather provides consistent information to be used in making holistic judgments. The final rankings 
cannot be calculated based solely on the individual factor rankings since additional information may be 
brought to bear on that holistic judgment; the factors included in the framework are meant to inform holistic 
judgment, not to replace it or provide a checklist approach. However, the holistic assessment was grounded 
by consistent use of the factors; to maintain robustness of the factors, when a capability was placed on 
the scale of overall concern, it was compared to the ratings of the other capabilities already placed on the 
overall concern graph. For example, if Capability 1 was scored as a medium level of concern with regard 
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to usability of the technology and Capability 2 was scored as a relatively high level of concern with regard 
to usability of the technology, this information informed the assessment of overall level of concern about 
Capability 2 relative to Capability 1. 

3. The factor scaling approach has implications for future comparative assessments. The factors that make 
up the framework were constructed specifically for this study and were refined through the process of 
applying them to assess specific capabilities. Using a relative scaling approach allowed these definitions to 
be refined and aligned as the study progressed. In addition, the use of a relative rather than absolute scale 
for the factors means that the placement of capabilities already on the scale may need to be adjusted as 
subsequent capabilities are assessed. For example, if a capability is introduced that holds a much greater 
concern than the highest-ranked item already assessed, either the already-assessed item might need to be 
moved down the scale or the scale might need to be extended to allow the new capability to be ranked as 
“very high” concern. An alternative approach that could be used in future assessments, rather than starting 
with any capability and making all subsequent judgments relative to it, could be to identify the highest 
and lowest capabilities on each factor, assign the highest “100” and the lowest “0,” and place all other 
capabilities on the scale relative to those capabilities. 

4. Choices may need to be made to capture uncertainty and variability. In placing synthetic biology capabilities 
on low-to-high scales for each framework factor, placement reflected the range of potential concerns for a 
given capability, with particular exceptions noted in the analyses presented in Chapters 4-6. Uncertainty 
and variability beyond notable exceptions were captured by varying the width of the bar (see Figures 3-2 
to 3-4 for notional examples), with a wider bar representing greater uncertainty or variability. During the 
assessment process, one case (re-creating known pathogens) initially had a very wide bar when assessing 
some of the factors, primarily because of the diversity of organisms that the capability included. In 
response, that capability was divided into two capabilities that were assessed separately (re-creating known 
pathogenic viruses and re-creating known pathogenic bacteria) to allow the assessment to be more precise. 

5. A qualitative assessment approach was used; other approaches to using the framework are possible. 
Methodologies for technical forecasting in emerging areas such as synthetic biology are evolving to meet 
the needs of decision makers. The report uses the framework to conduct a qualitative assessment; other users 
could choose to apply the framework in different but still meaningful ways. In the future, other users may 
decide to pursue a more quantitative approach to conducting the assessment or to extend the framework 
to incorporate sources of information outside the study’s scope (such as intelligence on actor intent or 
additional information on U.S. mitigation capabilities). The choice to use a qualitative or quantitative 
approach would be impacted by the amount and types of information available and the level of precision 
and understanding that would be consistent with the available information. Were a quantitative approach 
pursued, the framework factors and this study’s low-to-high qualitative ranking approach could be fed 
into that process, although interdependency among the framework factors poses challenges to the use of 
a simple additive multiattribute model and the use of correlated input distributions would be required. A 
more complex multiplicative model could be considered to account for the interdependencies, but that 
approach adds significant complexity. For a quantitative approach, consideration would also need to be 
given to appropriately representing uncertainty. 

In summary, this chapter describes the development of a multiattribute framework that identifies the factors 
that drive levels of concern for synthetic biology capabilities (the relevant outcome). The guiding objective of 
this approach was to identify the features of a synthetic biology capability that would affect the level of concern 
about a given capability being used for harm. The resulting framework is thus intended to describe the reasoning 
behind what is of relatively higher concern and what is of lower concern, among the capabilities considered, and 
why. The framework is also intended to serve as a tool that others can use to assess relative concern, albeit not in 
a formulaic or checklist manner, for newly emerging capabilities and to update the level of concern for existing 
technologies or capabilities in response to scientific and technical advances. The use of the framework to analyze 
specific synthetic biology capabilities is described in Chapters 4-6. Chapter 9 discusses the overall landscape of 
concern and presents results of the holistic assessment across the set of synthetic biology capabilities evaluated 
(see Figure 9-1). 
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Assessment of Concerns Related to Pathogens 
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presented Native Americans with blankets that had covered smallpox victims, potentially exposing this naive 
population to the scourge of smallpox (Duffy, 1951). With the advent of microbiological techniques, it became 
possible to use specific pathogens as weapons. This capability enabled several nations, but most extensively the 
Soviet Union and the United States, to develop offensive biological weapons programs, which continued until they 
were legally prohibited by the Convention on the Prohibition of the Development, Production and Stockpiling 
of Bacteriological (Biological) and Toxin Weapons and on Their Destruction (known as the Biological Weapons 
Convention, or BWC), signed in 1972 (BWC, 1972). After the BWC was signed, the development of pathogens 
as weapons became the province of clandestine nation-state programs and non-state actor terrorism. One of the 
most high-profile uses of pathogens as weapons was the “Amerithrax” bioterror attack in 2001, in which Bacillus 
anthracis spores were sent through the U.S. Postal Service, resulting in five deaths, prophylaxis of 30,000 indi¬ 
viduals due to potential exposures, and hundreds of millions of dollars in decontamination expenses (DOJ, 2010). 

In these historical examples, naturally occurring pathogens were developed as biological weapons. Specific 
pathogens were selected for bioweapons development based on their ability to cause morbidity and mortality and 
on their ability to be converted into large-scale weapons. The age of synthetic biology raises the possibility that 
pathogenic bioweapons could be designed, developed, and deployed in new ways that depart from the disease- 
causing characteristics of a naturally occurring pathogen. First, although security protocols such as the Federal 
t Srk \W^ j^iTlfBf0LT*iilili »l^/»lii: il^ ^l<M^ ipCT ^Itl1ty.xy is«i.1h ^T iiujS^ ifl | (l'in i«pr(Tfniily in North America and 
Western Europe, have attempted to limit access to dangerous pathogens for many years, synthetic biology makes 
it possible to synthesize genomes and use those to generate, or “boot,” copies of naturally occurring organisms in 
the laboratory, opening new opportunities for the acquisition of existing, regulated pathogens. Second, synthetic 

potentially leading to the acquisition of desired attributes. For example, such manipulations could potentially result 
in pathogens that have, in comparison to the original pathogen, increased virulence; antibiotic resistance; ability 
to produce toxins, chemicals, or biochemicals; or ability to evade known prophylactic or therapeutic modalities. 
Third, synthetic biology tools could be used to synthesize and boot entirely new organisms, potentially incorporat- 
IIMSireglBM IBIBliKilliHBaMtiiiyMIlililllM 

This chapter analyzes these potential applications of synthetic biology related to the creation of pathogen- 
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based bioweapons. To assess the level of concern warranted for each capability presented in this chapter (as well 
as those presented in Chapters 5 and 6), the factors outlined in the report’s framework for assessing vulnerabilities 
were considered: Usability of the Technology, Usability as a Weapon, Requirements of Actors, and Potential for 
Mitigation. Conclusions regarding the relative level of concern for each capability as it relates to each factor are 
presented in the form of a five-point scale from Low Concern to High Concern. Although all of the factors and 
elements identified in the framework were considered during the assessment, the discussion presented in these 
chapters focuses primarily on those elements deemed most salient to, or in some cases unique to, each capability. 
For each factor, the level of concern warranted for each capability relative to the other capabilities considered is 
presented at the end of the chapter along with a summary of the elements driving that relative level of concern. 
Conclusions regarding the relative ranking of all synthetic biology capabilities considered in the report are pre¬ 
sented in Chapter 9. 


RE-CREATING KNOWN PATHOGENS 

The construction of an organism from scratch requires at least two steps: synthesis of the organism’s genome 
and conversion of that nucleic acid into a viable organism (“booting”). Figure 4-1 illustrates these conceptual steps. 



Specify 

Design 

Build 

Test 


Early Planning 


Sequence 

Selection 


Design 

Assembly 

Strategy 


Verify 

Functionality 


DNA Synthesis 
and Assembly 


Boot 

Organism 


FIGURE 4-1 Activities involved in the construction of an organism from scratch. Considerations in the Design stage may 
include whether an exact copy of a pathogen sequence is desired, if synonymous mutations are introduced, or if a library 
(quasispecies) of sequences will be designed. Obtaining physical material in the Build stage may occur in the same physical 
location as the Design stage or may be outsourced to a commercial DNA synthesis provider. The size of the target sequence 
may make assembly necessary. Function of the synthesized pathogen, which may include the ability to infect and/or replicate, 
is determined in the Test stage. 
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This study assessed the potential for actors to use synthetic biology technologies to construct known, naturally 
occurring pathogenic organisms from scratch. Viruses and bacteria are assessed separately because of their distinct 
biological features. At present, construction of eukaryotic pathogens with larger genomes —such as fungi, yeast, 
and parasites—is considered significantly more difficult, and successes have not yet been reported. 

Re-creating Known Pathogenic Viruses 

Using today’s technology, the genome of almost any mammalian virus can be synthesized, and the sequences 
of known human viruses are readily available through public databases such as GenBank®, an annotated collec¬ 
tion of all publicly available whole and partial DNA sequences (NCBI, 2017). The 2002 synthesis of poliovirus 
by Eckard Wimmer and colleagues was among the first reported syntheses of a viral genome (Wimmer, 2006). 
The team assembled a complementary DNA (cDNA) of the poliovirus genome (approximately 7,500 nucleotides), 
under the control of the phage T7 promoter, from a series of oligonucleotides with an average size of 69 bases. 
This cDNA was used to produce viral RNA, which was then used to program an in vitro extract to produce infec¬ 
tious poliovirus virions (Cello et al., 2002). Since then, larger and larger viral genomes have been generated, 
taking advantage of advances in the ability to synthesize longer and longer segments of DNA. Modern assembly 
methods have greatly expanded the scale at which DNA can be constructed, to the point that building the genome 
of virtually any virus—either in the form of the genome itself for a DNA virus or as a cDNA of an RNA virus 
that can be transcribed into the viral genome—is now possible (Wimmer et al., 2009). A notable example is the 
recent report of the construction of the horsepox genome (consisting of more than 200,000 base pairs) as part of 
an effort to develop a new smallpox vaccine (Kupferschmidt, 2017; Noyce et al., 2018). (It should be noted that 
while the booting of some viruses, e.g., polio, has been performed using cell-free extracts, most viruses must be 
booted inside cells, and some viruses, including horsepox, require the use of a helper virus in cells.) 

The assessment of concerns related to re-creating known pathogenic viruses is summarized here and described 
in detail below. 



Usability of the 

Usability as a 

Requirements 

Potential for 


Technology 

Weapon 

of Actors 

Mitigation 

Level of concern for re-creating known pathogenic 
viruses 

High 

Medium-high 

Medium 

Medium-low 


Usability of the Technology (High Concern) 

Overall, the cost of producing a viral sequence and booting it is fairly low; synthesis is inexpensive and 
becoming more so as time passes, and cell culture facilities are not expensive to build, maintain, and operate. 
Therefore, since the usability of the technology is hindered only by weak barriers, the level of concern with regard 
to this factor is relatively high. 

The Design phase of the Design-Build-Test cycle could be skipped for the synthesis of a known virus, assum¬ 
ing that the sequence of the genome to encode the pathogen is known. The first step of the Build phase would 
be to synthesize the DNA encoding the virus genome, which can either be ordered from commercial vendors or, 
if the actor has appropriate resources, synthesized in-house. The former approach may present a barrier because 
most nucleic acid synthesis companies screen for sequences of concern, such as sequences derived from pathogens 
on the Federal Select Agent Program Select Agents and Toxins list (CDC/APH1S, 2017). However, this barrier 
is weak for several reasons, including that actors need not limit themselves to viruses on the Select Agents list, 
industry compliance with the screening guidelines is voluntary, and oligonucleotide orders are not screened. Actors 
could exploit these factors or use other approaches to bypass screening, at least for viruses with smaller genomes. 

Having a genome in hand is only the first step in booting a viable organism. The ease with which a virus can 
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be generated from its genome is largely a function of two variables: the size of the genome and the nature of the 
genomic nucleic acid (i.e., DNA, positive-strand RNA, or negative-strand RNA). In general, the genome must be 
introduced into cells in culture in which the viral genome can be replicated and assembled into infectious viral 
progeny. If there is no cell line in which the virus can be grown, the options become more limited. Poliovirus has 
been assembled completely in vitro from purified components or crude extracts (Cello et al., 2002). Although this 
method may become applicable to other viruses as the study of virus assembly leads to better in vitro assembly 
systems, such systems are currently not scalable for the production of larger quantities of virus, and eventually 
the actor would need to move into cell culture approaches. 

Positive-strand RNA viruses, whose genomes can be directly translated by the cell to produce viral proteins, 
are generally easier to synthesize and boot than negative-strand RNA viruses. For positive-strand RNA viruses, 
the complementary DNA (cDNA) must be engineered to express an exact copy of the viral genome, including 
appropriate sequences at the 5' and 3' ends that govern transcription and translation, but that process is fairly 
straightforward. This cDNA can be transcribed in vitro to produce a viral RNA that, when transfected into cells, 
serves as a messenger RNA (mRNA) for production of viral replication proteins that initiate the complete viral 
life cycle (Kaplan et al., 1985). RNA viruses with a negative-strand genome present a slightly higher challenge 
to synthesize because, by definition, negative strands are not translated. For these viruses, the genome is usually 
introduced in the cell along with an expression vector that encodes the viral replication protein(s). Then, once the 
cellular RNA polymerase produces the viral RNA genome from the cDNA, the viral replication machinery can 
take over (Neumann et al., 1999). 

Assuming that an actor can identify a cell line in which the virus can be grown, smaller viral genomes would 
be, in general, easier to boot, whereas large viral genomes would present a greater challenge (see Figure 4-2). 
Large DNA molecules must be manipulated with care to avoid fragmentation, and therefore large genomes 
(greater than about 30,000-50,000 base pairs) are subject to integrity constraints. However, overlapping DNA 
fragments are recombined readily once inside the cell, and in fact this ability to use the cell to stitch together 
fragments (Chinnadurai et al., 1979) was used extensively in the early days of gene therapy to produce adenovirus 
vectors expressing various transgenes. As the DNA of most DNA viruses is infectious, once that DNA enters 
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FIGURE 4-2 Relative scales of genetic information encoding familiar bacteria, viruses, and toxins. A single large toxin gene 
(smallest size represented in the figure, kilobase pairs) is shown in the leftmost box (lightest blue). Progressively larger genome 
sizes are shown in progressively darker hues moving to the right: single-stranded RNA virus genomes (kilobases), double- 
stranded DNA virus genomes (kilobase pairs), and bacteria (megabase pairs). The difficulty of DNA assembly and booting is 
partly a function of genome size and structure. 

SOURCE: Adapted from John Glass, J. Craig Venter Institute. 
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the nucleus, the cell takes over the process of transcription and translation, ultimately leading to assembly of 
progeny. Poxviruses are a notable exception in that they replicate in the cytoplasm and require co-infection with 
a helper virus to initiate the first round of replication. The recent successful construction of the horsepox genome, 
which contains more than 200,000 base pairs, underscores the increasing feasibility of booting larger genomes 
(Kupferschmidt, 2017; Noyce et al., 2018). 


Viruses have evolved to infect people and other organisms. The impact of a synthesized existing virus would 
be highly predictable based on knowledge of its natural behavior. The level of concern with regard to usability as 
a weapon spans a wide range depending on a particular virus’s natural tropism, virulence, environmental stability, 
and other such parameters. Production scale and delivery have long been considered key barriers to using existing 
viruses as weapons, based on knowledge of historical offensive biological weapons programs (Guillemin, 2006; 
Vogel, 2012). Even today, scaling up production and delivery enough to use a synthesized existing virus as a 
larger-scale weapon would present substantial barriers compared to a smaller-scale attack. However, the concern 
level is medium-high because an actor could synthesize just a small amount of virus known to be particularly 
dangerous, deliver it to a small number of victims, and wait for the virus to spread as it does naturally. There are 
natural viruses with reproduction rates, routes of transmission, and virulence that are concerning because of the 


Requirements of Actors (Medium Concern) 

The concern based on the requirements of actors is medium. The production of most DNA viruses would be 
achievable by an individual with relatively common cell culture and virus purification skills and access to basic 
laboratory equipment, making this scenario feasible with a relatively small organizational footprint (including, 
e.g., a biosafety cabinet, a cell culture incubator, centrifuge, and commonly available small equipment). Depending 
upon the nature of the viral genome, obtaining an RNA virus from a cDNA construct could be more or less difficult 
than obtaining a DNA virus. Overall, however, the level of skill and amount of resources required to produce an 
RNA virus is not much higher than that for a DNA virus. There are ongoing efforts to improve the nature of the 
cDNA clones used to produce RNA viruses (e.g., Aubry et al., 2014; Schwarz et al., 2016), but these advances tend 
to be incremental in nature. The J. Craig Venter Institute (JCVI) was able to develop a viable seed stock within 
just 3 days of learning the sequence of a new strain of influenza A virus (a negative-strand virus). Although JCVI 
has extensive resources and expertise that would not be available to every actor, the demonstration nonetheless 
underscores current capabilities regarding booting both DNA and RNA viruses. 

On the other hand, one key challenge when producing some RNA viruses is the concept of quasispecies. 
Because viral RNA polymerases are highly error-prone, each time an RNA viral genome is copied within the cell, 
it generally contains one or more mutations (Lauring et al., 2012). Thus, the progeny viruses that egress from 
an infected cell are not a clonal population, but rather a mixture of highly related, nonidentical viruses referred 
to as a quasispecies. The potential genetic composition of the population, therefore, is a function of the starting 
sequence because any given codon can only mutate to certain other codons. Because most sequences deposited 
into databases are derived from recombinant clones, each of which represents a single member of the quasispecies, 
it is possible that the starting sequence may not generate a “wild type,” fully virulent population after booting. 
Thus, depending on the resources and expertise available to the actor, there may be difficulties in building and 
testing a fully virulent RNA virus. 


Potential for Mitigation (Medium-Low Concern) 

The consequence management measures for attacks using re-created known pathogenic viruses would be 
identical to those available for the natural pathogens, including vaccines and antivirals for some agents, along with 
public health measures such as social distancing and isolation of sick individuals. With current approaches, it may 
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prove challenging to recognize and attribute such an attack because infections arising from a natural pathogen 
may be indistinguishable from those arising from the synthesized version. However, the same public health mea¬ 
sures will be implemented regardless of whether the virus is synthesized or natural. While public health measures 
deployed to counteract natural viral outbreaks are not perfect, ongoing surveillance and containment efforts in the 
United States are impactful and have been effective in containing some outbreaks in recent years. 

Screening commercially produced synthesized DNA sequences may be one of the only practical options to 
deter an attack using a re-created known pathogenic virus. The effectiveness of this approach, however, is under¬ 
mined by the inherent limitations of list-based screening, the expectation that there are international companies 
that do not screen orders and are outside of U.S. regulatory control, the fact that oligonucleotides are not screened, 
and the fact that it is possible to synthesize genetic material in-house with purchased equipment. 

Despite current inabilities to attribute and effectively prevent attacks using synthesized viruses, overall concern 
with regard to the potential for mitigation is medium-low owing to the existing public health measures that could 
be employed against an attack. However, the concern level is higher for viruses that spread rapidly and efficiently 
and have a short serial interval (the time between when a person is infected with a pathogen and when he or she 
can spread it to others). 


Re-creating Known Pathogenic Bacteria 

The genomes of many existing bacteria have been characterized, and the same types of DNA synthesis and 
booting approaches used for large viral genomes can, in theory, be applied to re-create known pathogenic bacteria. 
Indeed, JCVI reported the synthesis and booting of Mycoplasma mycoides in 2010 (Gibson et al., 2010). Other 
microbial genome synthesis projects are well under way, such as for Escherichia coli (4 million base pairs; Ostrov 
et al., 2016) and yeast (11 million base pairs; Mercy et al., 2017; Mitchell et al., 2017; Richardson et al., 2017; 
Shen et al., 2017; Wu et al., 2017; Xie et al., 2017; W. Zhang et al., 2017). 

The assessment of concerns related to re-creating known pathogenic bacteria is summarized here and described 
in detail below. 



Usability of the 

Usability as a 

Requirements of 

Potential for 


Technology 

Weapon 

Actors 

Mitigation 

Level of concern for re-creating known pathogenic 
bacteria 

Low 

Medium 

Low 

Medium-low 


Usability of the Technology (Low Concern) 

It is not yet possible to successfully re-create known bacteria; therefore, the level of concern is relatively low 
with regard to the usability of the technology. As is the case with viruses, GenBank® is a rich source of sequence 
information from which to build a known bacterium. However, given that bacterial genomes are typically one to 
two orders of magnitude larger than most viral genomes (see Figure 4-2), bacteria present a much greater technical 
challenge to synthesize and boot. In the case of the JCVI synthesis (Gibson et al., 2010), a single base-pair mis¬ 
take initially prevented booting of the bacteria and cost the project team months of time (JCVI, 2010). Therefore, 
while the Design step is straightforward, the Build component of the Design-Build-Test cycle, in particular the 
construction of the full genome, currently is a significant barrier. In part, this difficulty stems from the challenge 
of maintaining the structural integrity of the DNA itself: DNA fragments larger than 30,000 base pairs are easily 
fragmented when subjected to any kind of shearing, including standard laboratory pipetting, which makes them 
unusable for bacterial construction. To overcome this barrier in the only synthesis of known bacteria in the literature 
to date, the JCVI group built the bacterial genome as a yeast artificial chromosome. 

Assuming the bacterial genome can be synthesized and assembled, the next step—booting—is another par¬ 
ticularly difficult challenge, because one cannot simply add the genome to an in vitro extract and obtain a living 
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bacterium at the end of the reaction. Rather, the genome must be introduced into a cellular structure. The JCVI 
group accomplished this by transplanting their synthetic genome, propagated as a yeast artificial chromosome, 
into a related species of mycoplasma (Gibson et al., 2010). This transplantation approach has its own hurdles, 
both known (such as bacterial restriction or modification systems) and unknown. The process by which a synthetic 
bacterial genome may take over all necessary functions from a natural one is incompletely understood. Therefore, 
while obtaining the starting DNA components of a bacterial genome may be relatively straightforward from a 
technical point of view—they can be synthesized in-house or purchased (assuming they pass or evade Select Agents 
screening protocols)—the subsequent assembly steps present a substantially greater challenge than with viruses. 
As John Glass, leader of JCVI’s Synthetic Biology and Bioenergy Group noted in a public data-gathering session 
during the study process, making a bacterium is “very hard and expensive.” 

Given that the greatest bottleneck in re-creating known pathogenic bacteria is the step that moves from DNA 
to functioning organism, it will be important to watch for technological advances that may facilitate genome 
assembly and booting. For example, the development of a method to manipulate large DNA fragments without 
physically damaging them could reduce the difficulty of assembly. Or if a technique were developed that allowed 
direct transfer of the bacterial chromosome from the yeast in which it was built into a bacterial host, this would 
overcome the hurdles of shearing and transplantation. However, yeasts are not known to even transfer chromo¬ 
somes among themselves, except during mating; therefore, such a yeast-bacterial system would likely need to be 
developed from scratch if this approach was going to be pursued. 


Usability as a Weapon (Medium Concern) 

If a pathogenic bacterium were successfully synthesized, its properties as an infectious agent would be predict¬ 
able based on the known properties of the naturally occurring bacterium. As with synthesized viruses, the level of 
concern therefore depends on the bacterium’s natural tropism, virulence, environmental stability, and other such 
parameters. As with viruses, scaling up production and delivery enough to use synthesized bacteria as a weapon 
of mass destruction would present substantial barriers compared to a smaller-scale attack, raising many classical 
weaponization issues such as environmental stability during mass dispersal. Overall, the level of concern related to 
usability as a weapon is medium, but there is a wide range of concern with regard to different bacterial pathogens, 
reflecting differences in the potential for weaponization of various types of bacteria in general. For example, a 
bacterium that forms spores should be easier to disperse throughout, and would be more stable in, the environment 
compared to a bacterium that does not form spores. 


Requirements of Actors (Low Concern) 

Making an existing bacterium from scratch currently is very difficult and requires substantial expertise and 
resources —significantly more resources than would be required to synthesize a known virus. Therefore, concern 
on this factor is relatively low. An actor would need specialized, hands-on experience working with large bacterial 
genomes, a level of sophistication that takes years to achieve and is currently rare. In addition, this work would 
require a large amount of money and a fairly long time, as evidenced by the experience of groups working in this 
area, such as JCVI. 1 This would likely necessitate a large organizational footprint. Thus, the capability to both con¬ 
struct and boot such genomes is likely to remain accessible only to large, multidisciplinary teams that have access 
to substantial resources (funding, equipment, diverse and well-developed skill sets) for at least the next 5 years. 


Potential for Mitigation (Medium-Low Concern) 

Overall, concern with regard to the potential for mitigation is medium-low due to the well-established response 
options that are in hand for known bacteria. In terms of consequence management, there is a wide array of antibi- 


1 The 2010 creation of the synthetic Mycoplasma mycoides bacterial cell by JCVI reportedly took 15 years and cost $40 million to accom¬ 
plish (see JCVI, 2010; Sleator, 2010). 
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otic drugs that could be used to contain attacks using bacterial pathogens (indeed, a wider array than the number 
of antivirals available). However, antibacterial drug resistance can be expected to limit the number of drugs that 
would be effective in any given case, and the re-creation of a highly virulent, antibiotic-resistant bacterium capable 
of aerosol transmission would pose greater concern. 

In terms of prevention, it would be extremely difficult, if not impossible, to distinguish a facility being used 
to develop bioweapons based on synthesized pathogenic bacteria from a legitimate academic or commercial facil¬ 
ity. The Federal Select Agent Program may provide some deterrence for these activities within the United States, 
although screening protocols leave many loopholes that could allow for the undetected synthesis of bacterial 
genome fragments for Select Agents. Also, considerations related to recognizing and attributing an attack using 
synthesized bacteria are identical to those for synthesized viruses; it may be quite difficult to distinguish infection 
by a natural pathogen from that arising from the synthesized version. 

MAKING EXISTING PATHOGENS MORE DANGEROUS 

The age of synthetic biology has enabled the manipulation of viruses and bacteria to alter their genotypes, and 
therefore their phenotypes. The gene therapy field has made engineering the tropism of viruses an active area of 
research, and bacteria are commonly manipulated to serve as a platform for the production of useful compounds. 
These same experimental approaches could be used to develop new weapons. Traits of viruses and bacteria (both 
pathogenic and nonpathogenic) that could potentially be modified to engineer bioweapons—along with current 
technological capabilities and anticipated future developments relevant to pursuing such activities—were con¬ 
sidered in assessing the level of concern warranted for the potential use of synthetic biology to make existing 
pathogens more dangerous. 


Making Existing Viruses More Dangerous 

An actor seeking to make an existing nonpathogenic virus pathogenic or an existing pathogenic virus more 
dangerous or better suited for a biological attack would have multiple routes to consider. There are already some 
examples in the literature in which the use of biotechnology has resulted in a virus with enhanced virulence, an 
expanded host range, or other features that make it more pathogenic. In analyzing the level of concern warranted 
for this type of activity, a number of viral traits that potentially could be attempted using synthetic biology or 
standard techniques were considered (see Box 4-1). 

The assessment of concerns related to making existing viruses more dangerous is summarized here and 
described in detail below. 
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dangerous 





Usability of the Technology (Medium-Low Concern) 

Overall, the usability of the technology required for this capability involves many barriers, leading to an assess¬ 
ment of medium-low concern for this factor. Although scientists have a strong understanding of viruses and their biol¬ 
ogy and can conceive of many ways to manipulate them, modifying viral characteristics intentionally using rational 
design remains a substantial challenge. In most cases, the viral phenotype is a result of many interrelated viral 
functions resulting from a diverse array of genetic networks as well as host and environmental factors. Good 

which discuss drivers of airborne transmission and zoonotic spillover, respectively. Rarely can a specific phenotype 
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BOX 4-1 
Viral Traits 

The following are selected examples of viral traits, presented to give a sense of the range 
and type of traits that could theoretically be targeted for modification using biotechnology. 

Altered Tropism 

Tropism is the capacity of a virus to infect or damage specific cells, tissues, or species. 
While tropism is primarily influenced by the interaction of the viral cell attachment protein(s) with 
the receptor(s) present on the cell (thus determining viral entry), the larger property of tropism is 
determined by multiple viral and host cell factors (Heise and Virgin, 2013). Altering tropism could 
be used to expand the host range of an existing virus or otherwise increase a virus’s ability to 
take hold in a targeted population. 

Several studies have demonstrated the ability to alter the tropism of viruses. The avian 
influenza H7N9 strain has been causing isolated human infections since the initial outbreak in 
China in 2013, but sustained human-to-human transition has not been documented. In a recent 
publication, de Vries and colleagues (2017) demonstrated that only three mutational changes in 
the sequence of the hemagglutinin gene are sufficient to switch the virus’s tropism from avian to 
human and support binding to human tracheal epithelial cells. However, the researchers did not 
perform follow-up experiments to test whether these mutations were sufficient to make an actual 
host range shift in the ferret model. In earlier studies with avian influenza, researchers used site- 
directed mutagenesis to introduce mutations into the hemagglutinin gene to allow wild-type H5N1 
virus to bind to human receptors (Herfst et al., 2012). This group went on to show that as few as 
five mutations can lead to airborne transmissibility of H5N1 between ferrets (Linster et al., 2014). 

Researchers have also used synthetic biology to alter tropism in investigations of the respira¬ 
tory syndromes SARS (severe acute respiratory syndrome) and MERS (Middle East respiratory 
syndrome). There is considerable evidence indicating that a SARS-like virus in bats was the origin 
of the 2003 outbreak of SARS in humans (Li et al., 2005). The bat virus, however, does not grow 
tirf-cellLciJltLite'Sfl^helotelucidate the.; tens thot-mavJfij.e'occi-iiremto con* entlbJt , SWRS5( , Migiiffli> 
gB:irLi:-;infeLti ft a‘ifrum.t'r , ig^Be.LI<:e'i£irirdE.'dlej*aiies 62 QQa'Ki'ilTstituUfdlitfi^f>Xitri?rhiSARSSlbron'J l iru si 
receptor binding domain for the equivalent domain in the bat SARS-CoV virus, making the bat- 
^8Sfi^^'»sii»E>li^Maiiil^^figiSiMiE^ll^l^ritaai<aBilii^WS^Sbii!BisMislBggtaWKili9tagilllBawSiiiliaii 

the virus (Cockrell et a!rv2016) 

Enhanced Viral Replication 

Enhancing viral replication could help increase the impact and spread of a virus-based 
bioweapon. In experiments with echovirus 7, Atkinson and colleagues (2014) demonstrated that 
decreasing the CpG and UpA frequencies in two 1.1- to 1.3-kilobase regions of the viral genome 
enhanced viral replication in susceptible cells. Conversely, increasing the CpG and UpA frequen¬ 
cies resulted in decreased viral replication. While it is unknown whether these results would be 
the same in animals—enhanced replication in cell culture does not necessarily correlate with 
enhanced replication in vivo, and in fact, the reverse is sometimes the case—an actor with suf¬ 
ficient time and resources may be able to generate variants empirically and passage them in a 
susceptible host to select a variant with enhanced replication ability. 

Enhanced Virulence 

Virulence measures the relative capacity of a virus to cause actual disease in a host, rather 
than just infection. Virulence represents the combined effect of multiple genes and determinants 

continued 
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BOX 4-1 Continued 

that play specific roles in specific settings in vivo (Heise and Virgin, 2013). In the best-known example of 
an engineered virus resulting in enhanced virulence, Jackson and colleagues (2001) engineered ectromelia 
virus (mousepox), a member of the Orthopoxvirus genus and a natural pathogen of mice, to express mouse 
interleukin-4 (IL-4), with the goal of producing a contraceptive vaccine to control the mouse overpopula¬ 
tion. In the mouse model, the recombinant virus was shown to suppress primary antiviral cell-mediated 
immune responses and overcome preexisting immunity. It is also conceivable that actors would seek to 
manipulate a virus so that it causes disease by different mechanisms than a natural virus might, such as 
by manipulating neurobiology or altering the host microbiome. 

Ability to Evade Immunity 

At the root of the increased virulence demonstrated in the mousepox experiments (described under 
Enhanced Virulence, above) was the recombinant virus’s capability to evade immunity, fli's ;pdints to* 
another potential route for actors seeking to produce bioweapons: the development of viruses designed 
to anticipate and evade the immune response or even to overcome vaccine-based immunity. Detection of 
viral pathogens by the innate immune system leads to the induction of antiviral mechanisms that are mostly 
mediated by type-1 interferons. This primary response then leads to the activation of the adaptive immune 
response that is more directed, antigen-specific, and longer lasting (Iwasaki and Medzhitov, 2013). Many 
viruses have countermeasures to subvert the innate immune response including interferon-induced antiviral 
activity (see Chan and Gack, 2016, for a review). It may be possible to express one or more antagonists 
of these antiviral activities in a pathogen that does not already have that particular antagonist. In this way, 
the arsenal of activities that a virus uses to evade the innate immune response would be expanded and 
virulence may be enhanced. 

These viruses have mainly been developed in the 
context of, for example, improving adenovirus vectors to target specific tissues and as an approach to 
circumventing preexisting viral immunity that may limit the use of viral gene therapy vectors (Roberts et al., 
2006). It is conceivable that the latter approach could be used to develop a chimeric viral vector expressing 
a toxin 

tor virus. The molecular determinants of targeting are poorly understood, however, and these approaches 
generally require significant trial and error to be successful. 

Ability to Evade Detection 

Some modifications could result in a virus that would be difficult to detect using current outbreak re- 
sponse approaches. The most commonly used methods of laboratory identification of viruses are based 
on real-time polymerase chain reaction assays in which specific primers and fluorescently labeled probes 
are designed to bind to conserved and unique regions of the viral DNA or cDNA. Nontargeted methods of 
detection include array-based assays and next-generation sequencing, but these are not yet in wide use 
in clinical and commercial laboratories. Cell culture methods are rapidly disappearing from use. Mutations 
that target the primer binding sites could therefore result in a virus that is not recognizable. 

Ability to Resist Therapeutics 

Actors could seek to develop viruses capable of resisting available therapeutics, though the necessity 
of this approach would depend on whether effective therapeutics exist. Despite the availability of success¬ 
ful antiviral agents such as those used to counter HIV (human immunodeficiency virus), herpes viruses, 
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influenza viruses, and HCV (hepatitis C virus), there are no specific antiviral drugs for the vast majority 
of viruses. Even where antivirals exist, the development of resistance to these drugs is almost inevitable 
unless the rate of replication of the virus in the presence of the drug can be completely inhibited or, alter¬ 
natively, if multiple drugs are used in combination against different viral targets (Coen and Richman, 2013). 
For example, newer antivirals based on immune inhibition, such as the ZMapp therapeutic, are a mixture of 
three humanized monoclonal antibodies developed against Ebola virus and have shown survival benefits 
in nonhuman primates experimentally infected with the virus (Pettitt et al., 2013). A randomized, controlled 
trial in humans appeared to show beneficial effects but did not meet the prespecified statistical threshold 
for efficacy (Davey et al., 2016). 

Enhanced Transmissibility 

Airborne transmission of pathogens occurs through aerosolization and droplets. Airborne transmis- 
sibility determines the distance over which the virus may travel, and the determinants of this property are 
complex and dependent on multiple host and viral factors (Herfst et al., 2017). In a follow-up to the H5N1 
experiments described under Altered Tropism (above), the mutated virus was sequentially passaged in 
ferrets to force natural selection of heterogeneous viral mixtures and, after 10 passages, naive recipient 
ferrets were exposed to the infected ferrets in an adjacent cage without direct contact. Three of four recipi¬ 
ent ferrets became infected, demonstrating that selection had occurred for airborne transmissibility of the 
virus (Herfst et al., 2017). In another study, Imai and colleagues (2012) constructed a reassortant virus 
possessing the hemagglutinin from an H5N1 virus and seven gene segments from a 2009 H1N1 virus. 
After passaging through ferrets, a mutant of this reassortant was obtained that had four mutations in the 
hemagglutinin gene and was capable of respiratory droplet transmission in ferrets. This work demonstrated 
that a mammalian transmission phenotype could be conferred to highly pathogenic H5N1 influenza. 

Enhanced Stability 

The stability of a virus outside the host is influenced by multiple environmental factors including tem¬ 
perature, ultraviolet radiation, relative humidity, and air movement, as well as the structure of the pathogen 
itself. Enveloped viruses are generally less stable outside the host than non-enveloped viruses (Polozov 
et al., 2008; Herfst et al., 2017). Although it would be impossible to convert an enveloped virus to a non- 
enveloped virus because addition of the envelope is tightly coupled to specific features of the replication 
cycle, it may be possible to alter other features of a virus to enhance its stability for weaponization and 
mass dispersal. 

Reactivation of “Dormant” Virus 

It may be possible to use chemical or biological means to reactivate latent or persistent viruses. Such 
an attack could be targeted based on whatever endogenous mix of pathogens already exists in an individual 
or population. For example, some viruses, like HCV, cause chronic infections whose clinical symptoms do 
not appear until late in life; developing a chemical or biological trigger to accelerate the pathogenesis of 
such a virus is a possibility. It may even be possible to recombine a modern virus that has little pathogenic¬ 
ity and spreads widely with an earlier, perhaps more deadly, endogenous variant. 

Lower immunity in hematopoietic stem cell transplant patients has been shown to result in widespread 
viral reactivation, sometimes life-threatening (Cavallo et al., 2013), underscoring the potential impact of 
such approaches. Research focused on coaxing HIV out of latent reservoirs in order to completely cure the 
infection, the so-called “shock and kill” strategy (Shirakawa et al., 2013), could further advance potential 
dual-use research in this area. 
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be attributed to a single gene, or an altered phenotype to a specific mutation. Furthermore, the determinants of 
tropism, transmissibility, and other properties are often not well understood or predictable. Many of the research 
advances achieved to date have involved significant trial and error (e.g., gene therapy vector tropism modifica¬ 
tions [Nicklin and Baker, 2002]), inadvertent findings (e.g., the outcomes of IL-4 expression in ectromelia virus 
[Jackson et al., 2001]), or directed evolution (e.g., experiments altering transmissibility of avian influenza virus 
(Herfst, 2012; Imai et al., 2012). How these alterations would affect the behavior of these viruses in the human 
population is difficult to assess because of limited knowledge regarding how genotype would translate to pheno¬ 
type, but a successful introduction of such a modified virus into humans could have dire consequences. Although 
this knowledge gap of how to engineer complex viral traits is likely to limit the ability to engineer viruses for 
enhanced bioweapons currently, it will be important to monitor for developments that significantly increase the 
ability to relate genotype to phenotype—the knowledge of determinants of complex viral traits and how to engineer 
pathways to produce them. 

An added barrier is that introducing mutations into a viral genome almost invariably results in an attenuated 
(i.e., less pathogenic) virus (Holmes, 2003; Lauring et al., 2012), because there are constraints on viral genome 
organization. The introduction of mutations has been the classical method of making many effective live attenu¬ 
ated vaccines, including those for measles and yellow fever, as well as the Sabin poliovirus vaccine strain (Sabin, 
1985). The mutation(s) in these examples were introduced in a nondirected manner by passage in cell culture and 
resulted in phenotypic changes that lessened the virus’s ability to cause a harmful infection. An exception to this 
assessment of medium-low concern, however, would be the introduction of antiviral resistance. It is more feasible 
to introduce mutations that allow resistance to antivirals without causing attenuation, because the exact point 
mutations responsible for drug resistance are often known and generally do not lead to significant attenuation. 

The majority of alterations in a viral genome can be performed with standard recombinant DNA technol¬ 
ogy methods and do not require advanced synthetic biology techniques. One exception is the multiple substitu¬ 
tions required to change the frequency of particular bases to make synonymous mutations at multiple positions. 
Achieving this would be much simpler with the large pieces of DNA that synthetic biology technologies assist in 
producing, as well as synthetic biology tools that allow for the introduction of mutations in a directed manner and 
the application of many mutations simultaneously. For example, researchers are now using synthetic biology to 
introduce many synonymous mutations (including alterations in a DNA or RNA sequence that do not change the 
protein amino acid sequence), in an effort to make live attenuated viral vaccines that have better genomic stability 
(Wimmer et al., 2009; Martinez et al., 2016). 

Given the precision required and the limitations of rational design, an alternative approach would be to use 
combinatorial libraries, high-throughput screening, or directed evolution to test many candidate modifications. 
For example, viruses could potentially be tailored to evade specific immune responses by using computational 
modeling, high-throughput screening, or directed evolution to escape the most likely or most capable antibodies or 
T-cell receptors, provided that immune-dominant epitopes on a pathogen are known. However, even this approach 
would be constrained to some extent by the amount of available information regarding the determinants of the 
target phenotype and potentially by the current size limits of combinatorial libraries. It is not possible to test an 
infinite number of variations, although with available technologies a well-resourced actor would be capable of 
testing quite a lot. 

Finally, in addition to developing the variants to test, it is necessary to boot the recombinant genome in a cell 
line. Depending on the virus, this booting step can present a significant barrier, and booting imposes additional 
limits on the number of variants that can feasibly be tested. 


Because viruses have certain characteristics consistent with use as a weapon, and because the modification 
of the virus may enhance those characteristics, the concern is medium-high for this factor. tfosl 
manipulations required to alter the phenotype of a virus are difficult to predict, how a modified virus will behave 
when introduced into the human host is also difficult to anticipate. In addition, the tendency for alterations to 
attenuate viruses may serve as a “natural” mitigating factor and reduce the effectiveness of a bioweapon produced 
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in this way. Testing modified viruses may also present a barrier (unless the actor is willing to test in humans). For 
example, animal models do not always predict how a virus will behave in humans. It has been argued that avian 
influenza virus transmission in ferrets does not mean with certainty that those viruses would also transmit from 
human to human via an airborne route (Racaniello, 2012; Lipsitch, 2014; Wain-Hobson, 2014), but as noted above, 
if an engineered virus does acquire this property, the dynamics of weapons use change. 

If modifications are pursued with the intention of making the virus more dangerous in some way, the scope 
of casualty for an attack using a modified virus could be larger than an attack using a natural virus. If the modi¬ 
fications are intended to make the virus easier to produce or deliver, the resulting virus may bypass some of the 
classical barriers to weaponization, such as environmental stability during mass dispersal. Otherwise, a modified 
virus would present many of the same weaponization opportunities and challenges as those detailed for the re¬ 
creation of a known pathogenic virus. 


Understanding and being able to verify the product therefore imposes an expertise barrier to successfully manipulat¬ 
ing viral phenotypes. In general, however, the resources and organizational footprint required would be moderate, 
similar to those required for re-creating a known pathogenic virus. Therefore, there is a medium level of concern 
with regard to this factor. 


Potential for Mitigation (Medium Concern) 

Existing tools for mitigation, such as public health systems and antivirals, may be effective against a modi¬ 
fied virus. However, in general, they would be expected to be less effective against modified viruses than against 
the naturally occurring ones for which they are designed, leading to a medium level of concern for this factor. In 
particular, available medical countermeasures may be ill-suited against viruses with modifications designed to 
confer antiviral resistance or to alter the ability of the virus to be recognized by the immune system. Diagnostic 
approaches using sequencing would be effective for identifying a modified virus as being laboratory-derived in 
the vast majority of cases (antiviral resistance being one notable exception), but it is unclear whether that capa¬ 
bility would effectively facilitate attribution. Although the overall level of concern for this capability is medium 
with regard to the potential for mitigation, the concern level is higher for viruses with pandemic potential, such 
as influenza, for which a modified virus could present significant challenges in terms of measures to limit spread 
or reduce impact. 


Making Existing Bacteria More Dangerous 

As with viruses, an actor seeking to make an existing nonpathogenic bacterium pathogenic or to make an 
existing bacterial pathogen more dangerous would have many potential routes to consider. In analyzing the level 
of concern warranted for this type of activity, a number of modifications to existing pathogenic or nonpathogenic 
bacteria that potentially could be attempted using biotechnology were considered. Box 4-2 notes some of the ways 
in which such activities might differ in the context of bacteria compared to viruses. 

The assessment of concerns related to making existing bacteria more dangerous is summarized here and 
described in detail below. 



Usability of the 
Technology 

Usability as a 
Weapon 

Requirements 
of Actors 

Potential for 
Mitigation 

Level of concern for making existing bacteria more 
dangerous 

High 

Medium 

Medium 

Medium 


Copyright National Academy of Sciences. All rights reserved. 





Biodefense in the Age of Synthetic Biology 


50 


BIODEFENSE IN THE AGE OF SYNTHETIC BIOLOGY 


BOX 4-2 
Bacterial Traits 

The following are selected examples of bacterial traits, presented to give a sense of the range and 
type of traits that could theoretically be targeted for modification using biotechnology. This box focuses on 
how modifying traits in bacteria might differ from modifying analogous traits in viruses, described in Box 4-1. 

Altered Tropism 

Unlike viruses, which are exclusively intracellular pathogens, bacterial pathogens can be either in¬ 
tracellular or extracellular. Generally, extracellular pathogens are relatively environmentally stable and 
good at adapting to their environment. Even those that are not spore-forming often have the capacity to 
replicate and cause damage in multiple tissues and cell types and in different locations in the body. Given 
their environmental stability, they are difficult to eradicate and may not require host-to-host contact for 
transmission. Intracellular bacteria, like viruses, rely on host cell nutrients and are often able to evade the 
host immune system (Finlay and McFadden, 2006). Intracellular pathogens are usually transmitted via 
direct contact or aerosol transmission. Both intracellular and extracellular pathogens rely on adherins and 
colonizing factors, which facilitate contact with host target cells, confer resistance to leukocyte attack, and 
are significant virulence factors (Ribet and Cossart, 2015). 

Enhanced Virulence 

Many factors influence bacterial virulence and could potentially be targeted for modification. The 
primary mechanisms of bacterial pathogenesis include host target cell death (Bohme and Rudel, 2009), 
whether by cell lysis (resulting either from the multiplication of intracellular pathogens or as a result of 
the action of bacterial toxins) or by induction of apoptosis (programmed cell death); mechanical perturba¬ 
tions of host physiology (e.g., blockage of circulatory or respiratory passages due to the size or number 
of invading bacterium or as a result of mucous production); host cell damage resulting from the host 
immune response to the bacterial infection; and the action of bacterial toxins. The effects of cell death 
depend upon the host cells involved and are influenced by the bacterial burden introduced, the route of 
infection, complicating symptoms induced by host immune response, and the rapidity of the infection 
process. Colonization potential is influenced by the ability of some pathogenic bacteria (e.g., Shigella) to 
trigger premature or unscheduled apoptosis in the host cells they infect (Gao and Kwaik, 2000); the initial 
phase of this process involves the introduction of enzymatically driven damage to host cell DNA followed 
by massive disturbances in cell integrity and cell death. Another significant virulence factor is the ability of 
some bacteria (e.g., Bacillus anthracis) to form capsules consisting of polysaccharides and amino acids 
(Cress et al., 2014). Capsules prevent bacteria from being phagocytized by neutrophils and macrophages. 
Other virulence factors include invasion factors, which are usually encoded chromosomally but may also 
be plasmid-borne, and siderophores, iron-binding factors that allow bacteria to compete with host cells for 
iron acquisition (Quenee et al., 2012). 

Enhanced Toxin Production 

Many bacterial pathogens cause damage to host cells and tissues through the production of toxins. 
These toxins take two forms: exotoxins and endotoxins. Exotoxins are relatively unstable, highly antigenic 
proteins that are secreted into host body fluids. Some exotoxins are bound to the bacterial cell wall fol¬ 
lowing their synthesis and are released upon lysis of the invading bacterium (Sastalla et al., 2016). Often 
highly toxic, exotoxins are produced by both Gram-positive and Gram-negative bacteria. Some exotoxins 
can act only on certain cell types whereas others affect a broad spectrum of cells and tissues. Some 
bacterial pathogens make only a single toxin (e.g., cholera, diphtheria, tetanus, botulism) whereas others 


Copyright National Academy of Sciences. All rights reserved. 




Biodefense in the Age of Synthetic Biology 


ASSESSMENT OF CONCERNS RELATED TO PATHOGENS 


51 


can synthesize two or more distinct toxins (e.g., Staphylococcus, Streptococcus). Antitoxin antibodies to 
exotoxins are usually made rapidly by the host. The genetic determinants of exotoxins are often found on 
extrachromosomal elements, usually plasmids or bacteriophages. 

Endotoxins, on the other hand, are relatively stable, lipopolysaccharide components of the outer 
membrane of some Gram-negative bacteria that can act as toxins under certain circumstances (Zivot 
and Hoffman, 1995). Lipid A appears to be the toxic component, which can act while in the intact bacteria 
expressing it. Endotoxins are generally weakly immunogenic, eliciting fever in the host. They can cause 
hypotension due to increased vascular permeability accompanied by vasodilation, which can in turn result 
in shock. The genetic determinants for endotoxins are chromosomal. 

Actors could potentially seek to modify bacteria to enhance their natural toxin production or introduce 
toxin production into a bacterium that does not naturally produce toxins. Such approaches are further 
discussed in Chapter 5. 

Ability to Evade Immunity 

As with viruses, it is possible to engineer bacteria to anticipate or evade the immune response. 
Ability to Evade Detection 

As with viruses, the most commonly used methods of laboratory identification of bacteria are based 
on real-time polymerase chain reaction (PCR) assays in which specific primers and fluorescently labeled 
probes are designed to bind to conserved and unique regions of the bacterial chromosomal or extrachro¬ 
mosomal DNA. Another widely used method in clinical microbiology laboratories is MALDI-ToF (matrix- 
assisted laser desorption/ionization time-of-flight), a method of ionizing large molecules and identifying 
them by mass spectrometry in comparison to reference standards. Nontargeted methods of detection 
such as array-based assays and next-generation sequencing are available but are not yet in wide use in 
clinical and commercial laboratories. Culture methods are rapidly disappearing from use (Carleton and 
Gerner-Smidt, 2016). 

Ability to Resist Therapeutics 

In contrast to the relatively small number of antivirals, there are many antibacterial agents available 
that are capable of acting against a wide variety of bacterial pathogens. However, bacteria can be intrin¬ 
sically resistant to antibiotics, or can acquire resistance via chromosomal mutation and horizontal gene 
transfer. There are three main mechanisms of antibiotic resistance (Blair et al., 2015). First, the bacterium 
can prevent the antibiotic from accessing its target, either through reduced permeability of the antibiotic 
through the cell wall or membrane complex or through increased efflux of the antibiotic back out of the 
organism and away from its target. Second, the antibiotic target can be altered through genetic mutation, 
causing the target to become modified or protected. Finally, antibiotic resistance can be acquired by direct 
modification of the antibiotic itself, either by inactivation by antibiotic hydrolysis or by way of inactivation 
due to a chemical modification. These mechanisms are well studied and could potentially be adapted for 
the purposeful creation of antibiotic-resistant pathogenic bacteria. 

Enhanced Transmissibility 

As with viruses, the property of airborne transmission in bacteria is complex and dependent on multiple 
host and pathogen factors, in particular environmental stability and tissue tropism. Extracellular bacterial 
pathogens are extremely adaptable to environmental challenges and may not require host-to-host contact 
for transmission, making these pathogens difficult to eradicate. In addition, many bacterial pathogens that 
replicate extracellularly are capable of causing damage to different cells and tissue types. On the other 


continued 


Copyright National Academy of Sciences. All rights reserved. 




Biodefense in the Age of Synthetic Biology 


52 


BIODEFENSE IN THE AGE OF SYNTHETIC BIOLOGY 


BOX 4-2 Continued 

hand, many intracellular bacterial pathogens are communicable (i.e., capable of host-to-host transmission), 
facilitating rapid spread within a community and thus presenting a greater capacity to threaten public health. 

Enhanced Stability 

The environmental stability of a bacterium depends on its physiology and life cycle. Generally, because 
to the composition and structure of cell walls, Gram-positive bacteria are more environmentally stable than 
Gram-negative bacteria. In addition, when subjected to harsh environmental conditions such as desicca¬ 
tion, some Gram-positive bacteria form spores capable of remaining viable in the environment for decades, 
albeit in a metabolically dormant state. For example, spores of Bacillus anthracis can remain viable in the 
environment for up to a century (Friedmann, 1994; Repin et al., 2007; Revich and Podolnaya, 2011) and 
constitute the infectious form of this pathogen (with vegetative forms not being infectious). Actors may 
find it advantageous to engineer bacterial cell walls to more closely resemble Gram-positive organisms to 
enhance survival during aerosol dissemination and allow the agent to remain viable and available to infect 
the target host for extended periods of time. 


Usability of the Technology (High Concern) 

Generally speaking, the technology requirements for making existing bacteria more dangerous are relatively 
low, which leads to a relatively high level of concern for this factor. Although it is technically difficult to design 
and build bacteria from scratch, altering existing bacteria is relatively easy with molecular and genetic approaches. 
These capabilities make the Design phase of the Design-Build-Test cycle relatively straightforward, especially if the 
desired trait is conferred through a well-elucidated gene or pathway, such as known genes for antibiotic resistance 
or toxin production. In terms of the Build step, there are well-established techniques to insert, delete, or change 
existing genes (Selle and Barrangou, 2015; Wang et al., 2016; H. Zhang et al., 2017). Making such modifications 
does not necessarily require synthetic biology approaches, though such technologies can enhance the process. 
Some bacterial species are easier to manipulate genetically than others. In general, this step is easier if the genetic 
changes are smaller in size or fewer in number and more difficult for larger or more extensive modifications. In 
addition, if a desired pathogen has a close nonpathogenic relative, a researcher could splice relevant portions of 
the pathogen’s genome into the genome of the relative. 

In general, it is easier to manipulate bacteria than viruses. In part, this is due to the relative sizes of bacterial 
versus viral genomes; for viruses there are fitness pressures and constraints on genome packaging to keep the 
genome smaller, thus tending to attenuate modifications over time. Modifications are more likely to persist in a 
bacterial genome because those genomes are genetically more stable. In viruses, enhancement of one phenotype 
often results in diminution of another, a factor that would likely be difficult to overcome in viruses but presents 
less of a barrier when modifying bacteria. 

Some types of bacterial modifications would be easier to achieve than others; engineering bacterial traits that 
are complex requires greater knowledge of trait determinants and how to engineer pathways to produce them. On 
the more difficult end of the spectrum is altering tropism, which involves the complex interplay of a multitude 
of bacterial genes that are fundamental to the physiology of a specific bacterium (Pan et al., 2014). Tropism in 
bacteria is less likely to be alterable using synthetic biology approaches compared to tropism in viruses; however, 
there are routes that could be pursued. Both intracellular and extracellular bacterial pathogens rely on adherins 
and colonizing factors to facilitate contact with host target cells (Ribet and Cossart, 2015). It may be feasible to 
use synthetic biology technologies and big data analytical capabilities to engineer and express novel adherin or 
colonizing factor analogues of these bacterial proteins and introduce them either by encoding them on episomes 
or integrating them into the chromosome. Given the complexity of the host-pathogen interaction, transmissibility 
and communicability of bacterial pathogens in humans would also be difficult to confer or alter. In a similar vein, 
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it would be challenging to manipulate a bacterial pathogen to acquire efficient airborne transmission. Among 
other characteristics, the pathogen’s success would depend on environmental stability, which is intrinsic to its 
physiology and life cycle. It is not yet technically possible to alter a bacterial pathogen’s environmental stability 
in a fundamental way, such as by converting a Gram-negative bacterium to Gram-positive or a non-spore-forming 
bacterium to a spore-forming bacterium. That said, synthetic biology approaches would have greater likelihood of 
success in this realm than would standard molecular biology approaches. 

On the other hand, bacterial toxins, both endotoxins and exotoxins, are clearly significant virulence factors 
that can likely be readily modified or designed based upon data analysis. Given that endotoxins are chromosom- 
ally expressed and are intrinsic to the physiology of the bacterium in question, an actor would likely need to use 
a combination of synthetic biology and standard molecular biology approaches to modify existing endotoxins or 
create new ones. In addition, it is relatively trivial to confer resistance to antimicrobial drugs via standard molecular 
biology technologies (as demonstrated by the fact that it was done many years ago [Steinmetz and Richter, 1994]), 
and synthetic biology approaches would further enable targeted mutations to create a drug resistance phenotype. 


Usability as a Weapon (Medium Concern) 

The weaponization potential for making a bacterial pathogen more dangerous is, overall, of medium concern. 
Historically, scale-up and environmental stability have been key barriers to the weaponization of bacteria. Synthetic 
biology does not drastically change this equation. Despite a sophisticated understanding of some traits, such as 
antibiotic resistance and toxin production, knowledge is still limited for traits relevant to production and delivery 
of bacteria as a bioweapon, as noted under Usability of the Technology, above. 


Requirements of Actors (Medium Concern) 

The expertise required to design genetic modifications to affect bacterial traits varies widely depending on the 
nature of the modification (e.g., those that change the bacterium’s biology in a new way would be more challeng¬ 
ing) and the amount of available information about the genes involved (e.g., those involved in toxin production and 
antibiotic resistance are fairly well elucidated and would thus be accessible to someone with less expertise). Thus, 
as more information is published relevant to more traits, the level of expertise required to design modifications 
to those traits is reduced. Based on the current state of knowledge, this factor poses a medium level of concern. 

Making the actual modifications would require classical molecular biology expertise and experience in bacte¬ 
rial genetic approaches, but does not necessarily require training in advanced synthetic biology techniques. 


Potential for Mitigation (Medium Concern) 

The current concern level for this factor is medium. As discussed in the context of re-creating known patho¬ 
gens, the Select Agents list and voluntary screening guidelines are not likely to be sufficient to deter or prevent 
the development of modified bacterial pathogens. In terms of consequence management, one fundamental differ¬ 
ence between responding to a naturally occurring new organism that has unique characteristics and responding 
to a modified bacterial pathogen that is a purposefully deployed biological weapon is a calculating adversary. 
Although public health system components such as the National Syndromic Surveillance Program (NSSP) of 
the U.S. Centers for Disease Control and Prevention may indeed be well suited to detecting and containing new 
naturally occurring bacterial threats, an engineered organism resistant to antibiotics will challenge the ability of 
public health systems to contain and respond to such a pathogen. Thus, consequence management capabilities 
would be less effective in the face of bacterial pathogens engineered specifically to evade them, such as through 
resistance to vaccines or antibiotics. 
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CREATING NEW PATHOGENS 

A major aspiration within the field of synthetic biology is the design and creation of new organisms with 
beneficial uses. In the context of bioweapons, the possibility that this aspiration may potentially be directed toward 
producing pathogens that are entirely new was considered. In contrast with the discussion of modifying existing 
pathogens, the term “new” is used here to describe novel combinations of genetic parts from multiple organisms 
for which the product is not recognizable as primarily from one source. This can include genetic parts designed 
computationally with no near relative in the natural world. The resulting range of potential bioweapons in this 
category is extremely broad but serves to illustrate the more challenging applications that may be possible at some 
point in the future. 

One example of a new pathogen would be a virus constructed from parts of many different natural viruses. This 
mix-and-match approach might be used to combine the replication properties of one virus, the stability of another, 
and the host-tissue tropism of a third, for example. A variety of experimental approaches would be applicable to 
this goal. Directed-evolution approaches could be used to sample random combinations of viral DNA parts; while 
each individual combination would have a small chance of success, sampling a very large number of combinations 
would increase the chances of success. More explicit design approaches might be to develop software to model 
and predict the properties of specific designs, which would then be built, tested, and improved through multiple 
iterations of the Design-Build-Test cycle. As discussed under Making Existing Viruses More Dangerous, however, 
even simple changes to existing viruses can produce drastic deficiencies in key viral properties, making any such 
effort especially difficult. Nonetheless, work involving recomposing the structure of a bacteriophage genome 
into modular pieces (Chan et al., 2005) suggests that radical new combinations of viral sequences may be viable, 
although tools to design viruses with high confidence of success are currently lacking. 

A different example of a new pathogen would be one based on synthetic “genetic circuits” (described in 
Appendix A). A major pursuit within synthetic biology is the capability to arbitrarily program specific functions 
using genetic material. These efforts are exemplified by the engineering of DNA-encoded programs, relying 
heavily on concepts derived from information theory and computer science, such as constructing logic gates from 
individual switching functions. Importantly, the genetic material encoding those functions can in principle come 
from any where — from any branch of the tree of life or from an entirely new DNA sequence that has never been 
observed in nature. The designs for genetic circuits have greatly increased in complexity over time (see Toman 
et al., 1985, for an early example) through increased reliance on component abstractions and standardization. 
Figure 4-3 shows a recent example of software developed to enable such advanced designs in general, but not 
specifically in the context of pathogens. 

Although a number of genetic circuits have been designed to function in human cell lines in culture, applica¬ 
tions using genetic circuits in the human body are still in their infancy (Lim and June, 2017). The potential for 
using such technology to cause harm in the human body is thus a subject of broad speculation. Novel circuits 
could (in theory) be used to convert a healthy cell into a cancerous one or to provoke an autoimmune response. 
Such circuits might be designed to act on the host DNA using engineered factors that turn host genes on or off, 
such as at the level of transcription or translation. A variety of mechanisms have been demonstrated for such 
general-purpose switching, including the use of natural or artificial microRNA molecules and the use of CRISPR/ 
dCas9-type programmable gene repression or activation (Luo et al., 2015). Importantly, these are examples of 
mechanisms that have displayed a high degree of programmability in terms of which host DNA sequences can 
be targeted. In a similar vein, the potential programmability of genetic effectors may also lead to genetic circuits 
that sense and compute based on the state or type of cell (Weiss et al., 2003) or even specific genetic identity. 
In some cases, genetic circuits could be delivered to a small number of host cells using nonreplicating delivery 
mechanisms, which could be either virus-derived, such as those used in some gene therapies (see Chapter 7, Gene 
Therapy), or based on nonbiological materials. 

example, a bacterium employing a different combination of deoxyribonucleotides and ribonucleotides to encode 
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FIGURE 4-3 Illustration of genetic circuit engineering facilitated by a software environment that couples circuit specification 
and design to predictive models of circuit function. NOTE: Genetic circuits are a common staple for work in synthetic biology 
and allow users to combine multiple functions from the broad categories of sense, compute, and actuate. 

SOURCE: Nielsen et al„ 2016. 


There is a wide range of expert opinion as to the long-term plau¬ 
sibility of such efforts. 

The assessment of concerns related to creating new pathogens is summarized here and described in detail 
below. 
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Usability of the Technology (Low Concern) 

Because the creation of new pathogens faces multiple major knowledge and technical barriers, including 
knowledge regarding minimal requirements for virus and bacteria viability and the constraints on viral organization 
discussed above, the level of concern for this factor is very low at present. However, this is a clear example of an 
area that warrants ongoing attention. If the technical barriers can be overcome in the future, the level of concern 
would increase substantially. For example, the recent engineering of a designed nucleocapsid (a protein structure 
capable of packaging its own genetic material, reminiscent of a virus [Butterfield et al., 2017]) demonstrates how 
mimicking some pathogen-like functions may be achieved without relying on pathogen-derived DNA. Neverthe¬ 
less, such work falls far short of the extensive engineering required for producing a truly new viral pathogen. While 
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packaging genetic material is one essential viral function, additional barriers exist in engineering efficient host or 
tissue targeting, cellular entry, genome replication, and viral particle maturation, budding, or release. Optimizing 
all of these functions to work effectively in concert presents an additional difficulty. Reliably engineering a brand 
new virus to cause specific symptoms in the host is likely to be even more challenging. 

Usability as a Weapon (Medium-High Concern) 

The level of concern related to usability as a weapon is medium-high, primarily due to two factors. First, it 
may be possible to create pathogens with features not seen before. Such features could include, for example, the 
ability to target specific tissues or cell types using genetic logic, or the ability to produce aberrant neurological 
effects. Similarly, such pathogens could employ novel timing mechanisms, creating a delay between the time of 
exposure and the onset of symptoms. Second, in theory, pathogens designed from scratch may have a greater 
ability to cause harm because humans may not have been exposed to similar pathogens previously, and therefore 
may be immunologic ally naive. 


Requirements of Actors (Low Concern) 

Design, construction, and testing of a completely novel pathogen requires capabilities that have not yet been 
demonstrated. While this capability is extremely broad in terms of the specific types and features of a pathogen 
that could be created, the high degree of expected technical difficulty leads to an overall low level of concern in 
terms of the requirements of actors. Furthermore, the high uncertainty that such ambitious projects would yield 
the desired result in itself may lead actors away from such a path toward more reliably fruitful efforts. In general, 
one would expect that such ambitious, envelope-pushing projects would require well-resourced teams with deep 
expertise in several different technologies. A successful project would also be expected to require advanced design 
skills and tools, in particular software platforms that enable modeling and prediction of a pathogen’s properties, 
including host-pathogen interactions. Furthermore, navigating this uncharted territory would in general require 
many iterations of the Design-Build-Test cycle, with extensive testing needed during development. Thus, success¬ 
fully designing and deploying a new pathogen would likely require a team of actors with significant time, money, 
and other resources to invest in the process and a permanent, well-equipped facility (as opposed to a mobile or 
makeshift laboratory). 


Potential for Mitigation (Medium-High Concern) 

A completely novel engineered pathogen would have the potential to frustrate existing mitigation approaches 
in multiple ways, leading to a medium-high level of concern for this factor. First, attempts to identify the pathogen 
through molecular methods —such as PCR, sequencing, or the enzyme-linked immunosorbent assay (ELISA) — 
would be hampered because the pathogen would not produce results that match cleanly to known pathogens. 
(Indeed, in some cases one could imagine partial matches to multiple pathogens.) However, analysis of the genetic 
sequence of the new pathogen would likely indicate that a novel biological entity is present, providing important 
information. Second, symptoms of the new pathogen could mislead initial attempts at diagnosis, where common 
pathogens would be suspected first. Third, even if the agent is identified, correct treatment choices for the new 
pathogen would be uncertain. However, treatment measures taken that are common across a variety of ailments (i.e., 
anti-inflammatory drugs, rest, fluids) might still be germane and of some effectiveness because such approaches 
are tied not just to the specific features of a given pathogen, but to general classes of symptoms in human disease 
(e.g., fevers, swelling, congestion, inflammation). 


Copyright National Academy of Sciences. All rights reserved. 


Biodefense in the Age of Synthetic Biology 


ASSESSMENT OF CONCERNS RELATED TO PATHOGENS 


57 


SUMMARY 


• Known pathogens can be re-created. The difficulty of this re-creation increases with the size of the 
genome. 

• Engineering viruses to make them more pathogenic is possible. Design would be challenging because 
of knowledge limitations and because changes are generally detrimental to viruses; however, these 
challenges could potentially be addressed by building and testing many variations until a more 
pathogenic virus emerges. 

• Bacteria can be engineered with current technology, and the engineering of bacteria with characteristics 
such as multidrug resistance is an area of near-term concern. 

• With regard to making new pathogens, the difficulty increases as the distance from natural pathogens 
increases. 


Humans have used pathogens as tools of war for centuries. Modern biotechnology has opened new opportuni¬ 
ties for creating bioweapons, and synthetic biology further enhances and expands these opportunities. This report 
examined current capabilities and expected future developments related to re-creating known pathogenic viruses 
and bacteria, modifying existing nonpathogenic and pathogenic viruses and bacteria, and the potential creation of 
entirely new pathogenic agents. 

pathogenicity of existing viruses (thus making them potentially reliable bioweapons). However, because current 
mitigation approaches were designed to counter natural viruses, they would be reasonably well equipped to mitigate 
synthetic versions of known viruses. Looking forward, it will be important to monitor technological advancements 
that make it easier to synthesize larger and larger viruses, which can be expected to expand the number of viruses 
that could be produced as bioweapons using synthetic biology. 

The possibility of re-creating known pathogenic bacteria poses a relatively low level of concern, largely 
because of the high level of technical difficulty. Because they have much larger genomes than viruses, building 
and booting bacteria would require a great deal of expertise, time, and resources. Given the technical difficulty 
of this process, actors may find it substantially easier to acquire a pathogenic bacterium through means other 
than synthesizing them from scratch. (In fact, the same consideration applies to viruses, even if their synthesis 
is easier than that of bacteria.) In addition, as with viruses, existing mitigation approaches would be expected to 
be reasonably well equipped to handle an attack using a synthesized known bacterial pathogen. However, two 
developments could increase the level of concern. If techniques using yeast were to make it far more feasible to 
boot synthesized bacterial genomes, or if a breakthrough makes it easier to handle large DNA fragments without 
shearing, the re-creation of bacterial pathogens might warrant increased concern. 

The use of synthetic biology to make an existing virus more dangerous poses a medium level of concern. While 
modifying a virus to change its phenotype may be an attractive option in theory, there are significant barriers to 
overcome. Such an effort would be working against finely honed virus-host dynamics evolved over millions of 
years, and a key factor is that modifications to a virus generally lead to attenuation. The barriers are most signifi¬ 
cant in the Design and Test phases of the Design-Build-Test cycle. While modifying a virus requires significant 
expertise in viral biology and challenges may be encountered in the Test phase as a result of the inability to ethi¬ 
cally test the virus in a human, building the altered virus would be relatively straightforward. High-throughput 
and directed-evolution approaches could lower the barriers related to the Design phase. 

The use of synthetic biology to make an existing bacterium more dangerous poses a relatively high level of 
concern. This is largely driven by the technical ease of modifying bacterial genomes and the widespread avail¬ 
ability of information about the genes involved in traits such as antibiotic resistance and toxin production. Bacteria 
are routinely modified for a wide variety of beneficial purposes (e.g., to produce biofuels and pharmaceuticals), 


Copyright National Academy of Sciences. All rights reserved. 


Biodefense in the Age of Synthetic Biology 


58 BIODEFENSE IN THE AGE OF SYNTHETIC BIOLOGY 


TABLE 4-1 Bottlenecks and Barriers That Currently Constrain Capabilities and Developments That Could 
Reduce These Constraints 0 


Capability 

Bottleneck or Barrier 

Relevant Developments to Monitor 

Re-creating known pathogenic 
viruses 

Booting 

Demonstrations of booting viruses with synthesized genomes 

Re-creating known pathogenic 
bacteria 

DNA synthesis and assembly 

Improvements in synthesis and assembly technology for 
handling larger DNA constructs 


Booting 

Demonstrations of booting bacteria with synthesized genomes 

Making existing viruses more 
dangerous 

Constraints on viral genome 
organization 

Increased knowledge of viral genome organization and/ 
or demonstration of combinatorial approaches capable of 
facilitating larger-scale modifications to viral genome 


Engineering complex viral 
traits 

Increased knowledge of determinants of complex viral traits, 
as well as how to engineer pathways to produce them 

Making existing bacteria more 
dangerous 

Engineering complex bacterial 
traits 

Advances in combinatorial approaches and/or increased 
knowledge of determinants of complex bacterial traits, as well 
as how to engineer pathways to produce them 

Creating new pathogens 

Limited knowledge regarding 
minimal requirements for 
viability (in both viruses and 
bacteria) 

Increased knowledge of requirements for viability in viruses 
or bacteria 


Constraints on viral genome 
organization 

Increased knowledge of viral genome organization and/ 
or demonstration of combinatorial approaches capable of 
facilitating larger-scale modifications to viral genome 


"Shading indicates developments that are likely to be propelled by commercial drivers. Some approaches, such as combinatorial approaches 
and directed evolution, may allow bottlenecks and barriers to be widened or overcome with less explicit knowledge or tools. 


and the same techniques and knowledge base would likely prove useful for modifications pursued with a more 
nefarious intent. 

The creation of new pathogens from scratch currently poses a relatively low level of concern, primarily 
because the knowledge and technologies needed to pursue such an effort are in their infancy. It is likely that a 
major breakthrough (or more than one) in design capabilities will be required to make this capability a reality. 

Relevant developments to monitor for each of these capabilities are summarized in Table 4-1. 
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Assessment of Concerns Related to Production 
of Chemicals or Biochemicals 


Metabolic engineering of microorganisms is a decades-old discipline that has been used to enable manufac¬ 
turing of a variety of products including fuels, commodity and specialty chemicals, food ingredients, and phar¬ 
maceuticals. The core tenets and successes of metabolic engineering are based on the observation that biological 
systems are inherently chemical systems. A functioning cell, whether of microbial, human, or other origin, is 
essentially a collection of biochemical reactions taking place within a confined physical space as defined by a 
cell wall, cytoplasmic membrane, or other enveloping feature. These reactions produce structures that provide 
both physical form and function. Metabolic engineers have exploited biochemical pathways both to increase the 
production of compounds an organism naturally produces (e.g., upregulating the production of ethanol by yeast 
cells) and to coax an organism to produce compounds that are novel to the organism (e.g., rerouting the ergosterol 
biosynthesis pathway in yeast to produce a plant terpenoid [Kampranis and Makris, 2012]). 

Synthetic biology concepts, approaches, and tools have allowed metabolic engineers to pursue an increas¬ 
ingly complex array of chemical products, typically following the overall workflow conceptualized in Figure 5-1. 
Westfall et al. (2012), for example, engineered yeast to produce artemisinic acid, an antimalarial drug native to the 
Artemisina annua plant. Galanie et al. (2015) added more than 20 genes encoding enzymes nonnative to yeast to the 
yeast genome in order to produce a variety of plant-based opioids. Microbes have even been engineered to produce 
compounds for which no naturally occurring biological pathways have been elucidated, such as 1,4-butanediol 
(Yim et al., 2011), a common industrial chemical also used as a recreational drug. 

As the field of synthetic biology endeavors to “improve the process of genetic engineering” (Voigt, 2012), 
there is a concerted effort across the metabolic engineering community to demonstrate the biological production of 
increasingly complex molecules while simultaneously developing tools and approaches that reduce the resources 
required to achieve specific production metrics (e.g., titer, rate, and yield) (NRC, 2015). Hence, it is worth consid¬ 
ering how this technology could be misused to produce chemicals or biochemicals for malicious purposes. Such 
products are likely to fall into one of three categories: 

• Toxins .' Toxins are molecules produced by biological systems that are known to be harmful to humans or 
other animals. Toxins exhibit wide structural diversity and include small molecules as well as peptides. 


1 The word biochemical is used throughout the report to include toxins. 
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Given that toxins are known to cause harm, they are obvious candidates for engineered synthesis by an 
actor aiming to do just that. 

• Antimetabolites and small-molecule drugs. Antimetabolites are compounds that interfere with the normal 
functioning of cellular metabolism. Although some antimetabolites can be used for therapeutic purposes, 
as in the use of chemotherapeutic drugs to disrupt metabolic pathways in cancer cells, compounds that 
target normal functions in healthy tissues can lead to dysfunction or disease. Chemically synthesized small- 
molecule drugs can also cause dysfunction in healthy tissues. Both antimetabolites and small-molecule 
drugs may be amenable to synthesis by biological systems. 

• Controlled chemicals. Synthetic organic chemistry has given rise to a wide variety of chemical compounds 
with no known biological origin. Many have been essential to advances in human quality of life, whereas 
others have been used to produce explosives, chemical weapons, and other types of dangerous compounds. 



Specify 

Design 

Build 

Test 


Early 

Planning 


Metabolic 
Modeling 
and Pathway 
Selection 


Sequence 

Selection 


Design 

Assembly 

Strategy 


1. Test Enzymes 


3. Test in 
Animal Models 


2. Test Pathway 


DNA Synthesis 
and Assembly 


FIGURE 5-1 Activities involved in engineering an organism to produce a desired chemical or biochemical. Considerations 
in the Design stage may include choice of the host organism, modeling to predict metabolic pathway performance, and 
bioprospecting for appropriate enzymes to produce the desired product. Multiple rounds of the Design-Build-Test cycle are 
represented. Testing may first focus on enzyme functionality in early cycles, followed by testing of pathway performance, 
followed by testing for performance in an animal model in the case of in situ applications. 
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Some of these compounds (or functionally equivalent analogues) may be accessible through biological 
synthesis as an alternative to traditional organic chemistry. 

While these categories of compounds are instructive in considering end uses, for the purposes of this report it 
is also useful to differentiate between naturally occurring products (those that are generated in a non-engineered 
biological host) and manmade products (those that have been chemically synthesized). This distinction affects 
both the experimental approach and the technical difficulty of using synthetic biology to produce a given target 
compound. In addition, it is useful to consider the mode of production. For example, target compounds could be 
produced in small quantities in a laboratory, at large scale in bioreactors (analogous to the industrial production 
of bio-based chemicals), or even in situ in the human host, such as the production of a toxin by a microbe in the 
gut microbiome. These various modes offer different challenges with regard to production, delivery, and oppor¬ 
tunities for mitigation. 

Considering the different types of potential target compounds and the different ways synthetic biology tech¬ 
nologies might be exploited to produce them, three main types of activity were identified that are of potential 
concern: manufacturing chemicals or biochemicals by exploiting natural metabolic pathways, manufacturing 
chemicals or biochemicals by creating novel metabolic pathways, and making biochemicals via in situ synthesis 
of target compounds. This chapter assesses the relative level of concern warranted for each of these potential capa¬ 
bilities based on the four framework factors: Usability of the Technology, Usability as a Weapon, Requirements 
of Actors, and Potential for Mitigation. 

MANUFACTURING CHEMICALS OR BIOCHEMICALS BY 
EXPLOITING NATURAL METABOLIC PATHWAYS 

Biochemical compounds naturally produced by plant and microbial cells have been used for centuries as 
medicinal compounds. These products have been prepared as both plant extracts, in which the active ingredient 
is one of numerous chemical structures in the formulation, and as high-purity single compounds, made by culti¬ 
vating the producing organism in large-scale bioreactors and then purifying the output. Such products have been 
used to treat diseases ranging from microbial infection to hypertension. The opioids, used as analgesics, are now 
accessible by microbial fermentation, as well, though optimization of the “home-brewing” process has not been 
rigorously explored (Endy et al., 2015; Galanie et al., 2015). 

Each naturally occurring biochemical is the result of a series of chemical reactions that transform simple 
feedstocks such as glucose into the end products of interest. These transformations are mediated by enzymes 
encoded by the host organism’s DNA. Because biotechnologies allow the DNA encoding the necessary enzymes 
to be exploited independent of the original host, it is now possible to make such products without relying on the 
organism that naturally produces them. 

The assessment of concerns related to manufacturing chemicals or biochemicals by exploiting natural meta¬ 
bolic pathways is summarized here and described in detail below. 



Usability of the Usability as a Requirements of Potential for 

Technology Weapon Actors Mitigation 

Level of concern for manufacturing chemicals or 
biochemicals by exploiting natural metabolic pathways 

„■ , „• i_ ,. Medium- 

High High Medium , . , 

high 
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Usability of the Technology (High Concern) 

While the production of natural products in microbial hosts is not a trivial endeavor, the core technology 
required to complete one iteration of the Design-Build-Test cycle for metabolic pathway engineering of a target 
molecule is readily accessible and relatively easy to use with a basic level of molecular and microbiology expertise. 
Therefore, the level of concern with regard to this factor is relatively high. Assuming an actor has access to a trac¬ 
table host organism (e.g., Escherichia coli, Saccharomyces cerevisiae, Pseudomonasputida ), the ability to design 
gene cassettes and insert them into the host, the ability to culture the recombinant host and (as necessary) induce 
gene expression, and the ability to analyze the resulting products, attempting to engineer a metabolic pathway to 
produce a target toxin or other chemical or biochemical is, on the whole, a relatively straightforward proposition. 
Although success after one iteration of the Design-Build-Test cycle is probably unlikely, repeated cycles of effort 
frequently yield improvements in performance. 

Of critical importance is whether the pathway, that is, the specific series of chemical reactions leading from a 
specified starting substrate to the final product, has been fully elucidated. If the pathway is not fully known, this 
can create a substantial bottleneck or barrier, because a combination of both bioinformatics and experimental tech¬ 
niques would be needed to identify the missing enzymes and reaction steps, necessitating a more advanced level 
of expertise, more time, and more scientific resources. Difficulty will also increase if a chemical or biochemical is 
not well tolerated by the host organism engineered to produce the pathway. The difficulty of metabolic engineering 
also depends on the complexity of the molecule of interest; engineering a pathway to produce structurally simpler 
molecules will generally be more feasible than engineering a pathway for more complex molecules. For example, 
the complete biosynthetic pathway for the anticancer drug Taxol remains elusive some five decades after its first 
discovery in the Pacific yew tree. 

Once the pathway is known—and once the genes that encode the pathway enzymes have been specified—the 
next step is functional expression of the enzymes. This step is often challenging because enzymes transferred from 
one host to another may lose local structural features that are associated with activity, or they may be separated from 
essential accessory proteins. The tools of synthetic biology could be used to address these lost structural functions 
or to provide alternative pathways, but this makes for a more complicated proposition, as discussed below under 
Manufacturing Chemicals or Biochemicals by Creating Novel Metabolic Pathways. However, if post-translation 
modifications absent in the new host are essential for enzyme activity, this likely represents an insurmountable 
hurdle, at least in the near term. 


Usability as a Weapon (High Concern) 

More than offering new delivery mechanisms or modes of administration, metabolic engineering simply 
affords access to more material. In short, metabolic engineering in and of itself does not facilitate weaponization, 
but rather provides a potential means to access larger quantities of harmful material over shorter time frames. 

Simply introducing a series of functional enzymes into a suitable host to produce chemicals or biochemicals 
does not ensure sufficient productivity to warrant concern. Three metrics are essential to assessing the effective¬ 
ness of product formation in an engineered organism: productivity (amount of product made per unit of time), titer 
(concentration of the product external to the engineered organism), and yield (amount of the available feedstock 
that is converted to product). Whereas such metrics are inconsequential in the native environment (because most 
biochemicals and peptides are naturally produced in small amounts), these parameters are important to the wea¬ 
ponization of a chemical or biochemical that requires large-scale production. For example, if a toxin is deadly to 
humans at a concentration of 50 mg/kg, producing that toxin to a titer of 5 mg/L would require someone to ingest 
at least 10 L of fermentation broth per kilogram of body weight. At a titer of 10 g/L, only 5 mL of broth per kilo¬ 
gram of body weight would need to be ingested. Achieving higher titers allows effective doses to be manufactured 
in smaller bioreactors, potentially requiring fewer resources. Productivity, titer, and yield determine the volume 
of cell growth and feedstock needed to make a useful (i.e., harmful) amount of compound, as well as the length 
of time required for production. 

Generally speaking, engineering an organism to increase productivity, titer, and yield becomes progressively 
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more difficult. At present, engineering microbes to produce toxic small-molecule products in excess of 1 g/L 
would likely require the dedicated effort of trained metabolic engineers with access to a modern molecular biology 
laboratory, while a lower titer might be attainable with less expertise and fewer scientific resources. As a result, it 
can be expected that high-potency toxins would be more desirable targets for malicious actors. However, from the 
actor’s perspective there may also be a trade-off between the relative difficulty of producing a given chemical or 
biochemical and the amount needed to cause harm. Purity and productivity, as well as the complexity of the target 
molecule, will also factor into this trade-off. If a compound must have high purity to be effective as a weapon, the 
difficulty of achieving this level of purity in production or downstream processing (e.g., purifying from lysates) 
can potentially create a barrier. Low productivity is often related to insufficient substrate concentrations and/or 
low activity (i.e., the reaction rate is too slow); if enzymatic activity is not sufficiently high to achieve the turnover 
rates required, even when enzymes are expressed at high levels, additional iterations of the Design-Build-Test 
cycle may be required to achieve the desired level of productivity. 

Once an actor is able to produce a sufficient quantity of a target chemical or biochemical, the predictability 
of results is likely to be high, assuming the actor has selected a target chemical or biochemical that is already 
known to cause harm. For example, mass production of botulinum toxin would not require testing of the fermenta¬ 
tion product because the effects of its exposure are already known. Indeed, an actor could probably have greater 
confidence in the effectiveness or lethality of a chemical or biochemical whose pathway is well understood and 
is produced using synthetic biology as compared to a synthesized pathogen. The latter would definitely require 
testing to verify that the desired phenotypic results would be achieved. 

The scope of casualty expected from a chemical or biochemical compound produced in this way would depend 
on the amount produced, the potency, and delivery. Chemicals, biochemicals, and toxins do not spread on their 
own the way pathogens do, and so, effecting a large-scale attack would require delivering a sufficient amount to 
targeted populations, even if the compound is highly potent. However, there are many potential delivery mecha¬ 
nisms for chemicals or biochemicals, which do not tend to degrade when exposed to the environment the way 
that pathogens do, and thus would remain potent in a broader array of delivery scenarios than would a pathogen. 

In summary, engineering a microorganism to produce a chemical or biochemical by exploiting a natural path¬ 
way is considered to pose a relatively high level of concern with regard to usability as a weapon, primarily because 
of the predictability of the results; Producing a known toxic substance will result in a product with a known toxicity. 
In addition, chemical or biochemical products are more stable than pathogens. These considerations outweighed the 
fact that the difficulty of scaling up production to produce large amounts of a substance is a bottleneck or barrier, 
because there are a number of substances that are highly potent and thus toxic in very small amounts. 

Requirements of Actors (Medium Concern) 

Generally speaking, the core capabilities for executing a Design-Build-Test cycle in metabolic engineering 
require a relatively low level of metabolic engineering expertise, especially for a natural metabolic pathway that 
is already fully elucidated. However, the expertise required depends on the complexity of the pathway and target 
molecule. Achieving high-level synthesis, especially for difficult targets, does require more expertise and experi¬ 
ence; for example, in many cases an actor would need working knowledge of how to knit pathways together into 
a functioning whole. To fill in the gaps in an incompletely elucidated metabolic pathway, an actor would need 
access to bioinformatics capabilities in order to analyze genome and transcriptome data, as well as experimental 
capabilities to detect and identify intermediates. For these reasons, manufacturing chemicals or biochemicals by 
exploiting natural metabolic pathways is considered to pose a medium level of concern with regard to this factor. 

The organizational footprint required depends on the amount of product that is desired (which in turn depends 
on factors such as potency and titer). Small batches of a chemical or biochemical of interest could be achievable 
with a relatively small organizational footprint, but scaling up to produce large quantities in a bioreactor would 
require a larger organizational footprint and more resources. 
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Potential for Mitigation (Medium-High Concern) 

Overall, there is a medium-high level of concern with regard to this factor, primarily driven by the fact that 
countermeasures are not available for a number of toxins. Lessening the concern slightly is the fact that an attack 
would be expected to be readily recognized. This assessment assumes that an actor would endeavor to use meta¬ 
bolic engineering to produce compounds with known properties. Because most known biochemicals that could 
potentially be misused for an attack would naturally be present in very small amounts, the emergence of disease 
would be a strong indication of purposeful release, thus enabling rapid identification of an attack. However, because 
the end product would be a chemical or biochemical that is purified away from the organism that produced it, 
organism-associated signatures would not be available to determine whether the attack resulted from an organism 
intentionally engineered to produce a dangerous chemical or biochemical, and attributing an engineered organism 
to a specific actor would be even more difficult. 2 

The capacity for consequence management depends on the chemical or biochemical used. Governments have 
developed medical countermeasures to respond to attacks using a subset of known toxins, but there are other toxins 
that have not been the focus of such efforts. The countermeasures and public health response would be expected 
to be the same for naturally occurring chemicals or biochemicals and for those created using synthetic biology. 

MANUFACTURING CHEMICALS OR BIOCHEMICALS BY 
CREATING NOVEL METABOLIC PATHWAYS 

While nature has provided a wide array of biochemical compounds that could be exploited for targeted syn¬ 
thesis, enzyme-mediated conversions also can be used to produce chemicals that organisms do not naturally create. 
Biocatalysis has long been used to produce pharmaceutical intermediates and active ingredients not found in nature 
(Bornscheuer et al., 2012). It is not always necessary to use living microbial organisms in these processes; instead, 
purified enzymes can be used in reaction vessels in a manner analogous to traditional organic synthesis. At its 
core, designing a new biosynthetic pathway involves specifying a series of enzymatic steps that can convert a set 
starting substrate to the desired end product. In practice, the starting substrate is often a known primary metabolite 
(e.g., acetyl-CoA) (Savile et al., 2010), and the proposed reaction steps are based on known enzymatic chemistry. 

Engineered metabolic pathways that do not follow an existing natural blueprint have been exploited to commer¬ 
cialize biological production of chemical compounds (Yim et al., 2011). The true limits of biological synthesis are 
unknown, and advances in protein design and engineering are rapidly expanding the repertoire of enzyme-catalyzed 
reactions (Siegel et al., 2010; Kan et al., 2017). Researchers have also shown that materials typically present in 
very small amounts in biological systems, such as halogens, can be incorporated into natural products by merging 
plant and microbial biosynthesis machinery (Runguphan et al., 2010). These examples suggest that the range of 
molecules that may be accessible by biological synthesis is far larger than what has been demonstrated to date. 

The assessment of concerns related to manufacturing chemicals or biochemicals by creating novel metabolic 
pathways is summarized here and described in detail below. 



Usability of the 

Usability as a 

Requirements of 

Potential for 


Technology 

Weapon 

Actors 

Mitigation 

Level of concern for manufacturing chemicals or 
biochemicals by creating novel metabolic pathways 

Medium-low 

High 

Medium-low 

Medium-high 


2 However, note that the use of isotope ratios for chemical and biochemical attribution has been explored by the Federal Bureau of Inves¬ 
tigation (Kreuzer-Martin and Jarman, 2007). 
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Usability of the Technology (Medium-Low Concern) 

Producing a novel metabolic pathway is likely to be significantly more technically challenging than synthesiz¬ 
ing a natural metabolic pathway and is likely to require multiple iterations of the Design-Build-Test cycle. There¬ 
fore, the level of concern is medium-low with regard to the usability of the technology. The technical challenge 
stems largely from the fact that engineering novel pathways typically requires engineering enzyme activity, either 
through rational (computational) design or through directed evolution, to achieve both the activity and specific¬ 
ity required for the pathway of interest. In addition, the enzymes in many cases may be acting on substrates not 
encountered in nature; in such cases, the likelihood of success is greater if it is structurally similar to the natural 
substrate of the enzyme being used (Hadadi et al., 2016). For some reactions, it may simply be technologically 
infeasible to generate high enzymatic activity, but this is likely to be unpredictable, and it may require many 
Design-Build-Test cycles to determine that one has reached a dead end. Generally speaking, the level of difficulty 
is likely to be lower if the goal is to engineer a novel pathway that is based on an existing pathway, as opposed to 
engineering a pathway that is wholly new. 

Usability as a Weapon (High Concern) 

Considerations related to weaponization, scale-up, predictability of result, delivery, and scope of casualty for 
novel metabolic pathways are largely similar to those for natural metabolic pathways, and so large-scale production 
is a barrier or bottleneck. Scaling up production may present additional challenges in the case of novel metabolic 
pathways if the product is toxic to the cells used to produce it, creating another barrier or bottleneck. In the con¬ 
text of delivery, it may be possible for chemicals created through novel metabolic pathways to be more stable for 
storage and transport compared to natural biochemicals. 

Requirements of Actors (Medium-Low Concern) 

While computational tools and established methodologies exist for creating new metabolic pathways, meta¬ 
bolic engineering is still largely an “art” rather than a “science.” Because intuition continues to play a significant 
role in the successful execution of experimental designs, creating functional novel metabolic pathways is likely 
to require a higher level of expertise and experience than exploiting natural pathways would. In particular, if a 
novel pathway requires enzymes to act on novel substrates, expertise in protein engineering (which is beyond the 
typical skill set of an experienced metabolic engineer) would also be required. Both the knowledge about how to 
design novel pathways and knowledge of how to engineer enzyme activity are bottlenecks or barriers in this space. 
Therefore, the level of concern with regard to this factor is medium-low. 

Potential for Mitigation (Medium-High Concern) 

Considerations related to mitigation capabilities for chemicals or biochemicals manufactured by creating novel 
metabolic pathways are largely similar to those for chemicals or biochemicals created through natural metabolic 
pathways. 


MAKING BIOCHEMICALS VIA IN SITU SYNTHESIS 

The human microbiome, particularly the gut microbiome, has been a target for metabolic engineering. Gut 
microbes influence the metabolism of their host and are capable of producing a wide variety of biochemicals. 
While the extent of the influence of the microbiome on host metabolism remains an active research area, there has 
already been significant progress toward engineering gut microbes for therapeutic purposes. Engineered microbes 
are currently being prepared for clinical trials for the treatment of metabolic disorders (Synlogic, 2017), although 
engineering high flux through a metabolic pathway remains undemonstrated. 

As this research gains steam, it is worth considering whether the human microbiota could be exploited to 
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make biochemicals (within the cells of commensal organisms) and deliver them to human hosts to cause harm. 
In addition to the gut microbiome, the skin microbiome could be another potential avenue for in situ synthesis of 
such compounds. Related concepts include the manipulation of the human microbiome to cause dysbioses or as an 
avenue for horizontal gene transfer (see Chapter 6, Modifying the Human Microbiome). Environmental dispersion 
of a microorganism capable of producing toxins, antimetabolites, or controlled chemicals may also be considered 
a potential in situ delivery mechanism, one whose outcome would be difficult to predict. The basic principles of 
pathway engineering in a microbe are the same whether the intention is to culture the organisms in large vessels 
followed by purification of the molecules of interest or to introduce the organisms into the environment or a human 
host for in situ production and release of a biochemical. However, the scope of the engineering effort can vary 
substantially since manufacturing in vessels is likely to require that much higher production titers be achieved. 
For example, nanograms of a sufficiently toxic material delivered in situ could be sufficient to produce a harmful 
effect compared to tens of grams per liter needed for cultivation in and purification from fermentation vessels. 
This difference is important to consider in assessing concerns. 

The assessment of concerns related to making biochemicals via in situ synthesis is summarized here and 
described in detail below. 



Usability of the 

Usability as a 

Requirements of 

Potential for 


Technology 

Weapon 

Actors 

Mitigation 

Level of concern for making chemicals or biochemicals 
via in situ synthesis 

Medium-high 

Medium 

Medium 

High 


Usability of the Technology (Medium-High Concern) 

From an engineering perspective, creating a microbe capable of in situ biological synthesis of a biochemical 
presents many of the same opportunities and challenges as engineering metabolic pathways for the production of 
chemicals or biochemicals in a bioreactor, though there are some additional challenges, as well. While productivity, 
titer, and yield can typically be measured in the process of manufacturing a chemical or biochemical product in 
a bioreactor, conditions in the microbiome, for example, are quite different from those present in the laboratory. 
This makes it difficult to predict and control whether productivity, titer, and yield measurements in the labora¬ 
tory will translate to similar numbers once the microbe is delivered to the microbiome (or environment). Many 
Design-Build-Test cycles, including a substantial amount of testing in both cell cultures and in animal models, 
are currently needed to obtain engineered gut microbes with functional gene circuits (Fu et al., 2009; Kotula et 
al., 2014, Mimee et al., 2015; Matheson, 2016). One potential way to expedite development and reduce the need 
for multiple rounds of resource-intensive in vitro and in vivo testing would be to expose human subjects to large 
libraries of prototype microbes, then sequence the microbiome content to identify the successful prototype microbes 
if toxicity is observed. However, this library approach has important limitations. For example, a prototype microbe 
capable of producing high titers of a toxin if introduced to the gut as a monoculture could be effectively diluted 
by the presence of large numbers of ineffective prototype microbes, making it difficult to detect and identify the 
successful prototype microbe. In addition, it is possible that a microbe that produces high titers of a toxin would 
grow more slowly than prototype microbes that produce little or no toxin, making it difficult to separate signal 
from noise. Finally, the current state of the art in gut microbiome sequencing and assembly does not guarantee 
that a successful prototype strain could be correctly constructed and differentiated from all other introduced library 
strains. Nonetheless, the fact that many organisms harbor their own toxins as part of their infective life cycle means 
that it should not be impossible to align pathogenicity and evolutionary fitness, and indeed one of the easiest means 
of establishing a toxin in situ may be via an already known pathogen, as discussed under Usability as a Weapon, 
below, and in Chapter 4, Box 4-2. 

Overall, the knowledge needed to manipulate organisms in the gut and skin microbiome remains limited, as 
further discussed in Chapter 6, Modifying the Human Microbiome, and it is possible that unforeseen challenges in 
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producing biochemicals in situ will emerge in the coming years. However, the field has been advancing quickly. 
Already, researchers have demonstrated the ability to manipulate some human gut microbes, and the use of the 
microbiome for delivery of pharmaceuticals is an active area of research. Thus, the high rate of development and 
investment in this field leads to a medium-high level of concern with regard to this factor. It will be important to 
monitor for research breakthroughs that exacerbate opportunities for misuse in this area, as well as breakthroughs 
in understanding. 


Usability as a Weapon (Medium Concern) 

Usability as a weapon is considered of medium concern, largely due to current limitations in the ability to make 
introduced microbes persist in the microbiome. However, microbiome engineering is an active area of research, 
and significant advances, such as a demonstrated ability to cause persistent changes in the gut microflora, would 
cause the level of concern to rise. 

The gut microbiome is known to host thousands of gene clusters, and products of these clusters have been 
shown to be present in the gut at high micromolar concentrations (Donia and Fischbach, 2015). Therefore, it should 
be possible to engineer gut microbes to produce harmful small molecules at similar levels. However, despite the 
presence of these natural pathways in the microbiome, the principles behind engineering similar pathways to 
produce other products in situ have not been determined. Engineering the production of a toxin with sufficient 
titer, produced over a long enough time to be harmful to the host, is not necessarily straightforward. Furthermore, 
after being delivered into the host microbiome, the engineered microbe would need to colonize and persist to 
have a long-term effect. Experiments with attenuated vaccine strains suggest that it is necessary to eliminate 
some existing microbes in order to allow an introduced microbe to persist in the gut, adding to the complexity of 
purposefully infiltrating a host microbiome. A perhaps more likely scenario is that existing gut or skin microbes 
could be manipulated to increase their natural production of a harmful compound or to resist antibiotics or other 
countermeasures, thus allowing delivery of an agent without the barrier of infiltrating the native microbiome with 
a new microbial species. In addition, it is possible that a pathway lodged on a broad-host-range vector might be 
horizontally transferred to native species following transient introduction on a microbe that was otherwise unlikely 
to colonize; the horizontal transfer of in situ engineered pathways is further considered in Chapter 6, Modifying 
the Human Microbiome. 

Although the chemical product would be manufactured by cells, bioreactors or flasks would likely be required 
to produce a sufficient number of cells to enable delivery to the target human population. Microbes engineered 
to secrete highly potent biochemicals, which could cause greater damage in smaller quantities, would warrant 
greater concern than those engineered to produce lower-potency chemicals. But effectively delivering engineered 
microbes to the human target would still present significant barriers. Cold War-era studies on the weaponization 
of bacteria remain relevant to this concept. Contamination of food could be an efficient method of dispersal, but 
could be thwarted by standard food safety measures such as cold storage, cooking, and mechanisms to limit the 
spread of contaminated food. The scope of casualty from in situ biosynthesis would be expected to be relatively 
low, because the agent would need to be delivered to each individual and then persist in the gut or skin long enough 
to cause harm. That said, the ability to slightly or gradually modify human physiology and behavior via even low- 
level production of compounds could be extremely debilitating to a modern nation-state. 

Requirements of Actors (Medium Concern) 

Engineering microbes to actively secrete products in the microbiome would generally require a higher level 
of expertise than engineering a natural metabolic pathway but less sophistication than designing a novel meta¬ 
bolic pathway, leading to a medium level of concern with regard to this factor. Because multiple iterations of the 
Design-Build-Test cycle would be needed, actors would likely require access to significant laboratory resources 
over a long period of time. On the other hand, in situ synthesis presents fewer barriers with regard to scale-up and 
downstream processing than the production of chemicals or biochemicals in a bioreactor, and once a sufficient 
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engineered microbe is developed, producing and delivering a small quantity would not require a great deal of 
technical expertise. 


Potential for Mitigation (High Concern) 

The challenges of attribution and the difficulty of identifying and stopping an attack based on in situ synthesis 
of biochemicals lead to a relatively high level of concern with regard to this factor. Policies and procedures related 
to the containment of natural foodborne pathogen outbreaks should transfer well to the containment of engineered 
toxin-producing gut microbes. Indeed, the presence of strong public health infrastructure for food safety and 
response to contaminated-food outbreaks may deter skilled actors from pursuing an attack with engineered gut 
bacteria in favor of other attack vectors. In addition, while engineering microbes to resist traditional countermea¬ 
sures (such as the use of broad-spectrum antibiotics) could increase the casualty rate, containment and isolation of 
contaminated facilities would be expected to limit the spread of such agents. However, the delivery of engineered 
microbes to the gut via food is not the only potential attack vector or means of delivery. The development of an 
engineered microbe that could infiltrate the skin microbiome, or the development of a high-efficiency method of 
delivering gut microbes, could be less vulnerable to existing mitigation measures and thus significantly increase 
the level of concern warranted. However, these delivery modes are currently theoretical. 

Regardless of the effectiveness of public health infrastructure for containing an attack, it could be extremely 
difficult to recognize an attack—that is, to differentiate between a natural disease outbreak and an intentional 
introduction of engineered microbes into the microbiomes of affected people. This difficulty is the primary driver 
of the relatively high level of concern related to the potential for mitigation. Some types of attack would be easier 
to recognize than others; for example, the presence of an unlikely gut toxin or extremely high resistance to avail¬ 
able countermeasures may be more easily recognized as signs of an attack, while tracing an effect that is not a 
classical gut problem (e.g., opioids made in the gut) to engineered gut microbiota would be a substantial task. 

In contrast to the other applications of metabolic engineering discussed in this chapter, the genetic material of 
the engineered microbe would in the case of in situ synthesis remain present in the weaponized product. Sequencing 
clinical samples of impacted individuals could allow investigators to identify the genetic sequences or organisms 
used in an attack. However, such an effort would face significant technical challenges. First, if the engineered 
microbe is present in low abundance, most of the sequence data in a sample would come from non-engineered 
commensal microbes. Compounding this, only a small amount of the genome of an engineered microbe would 
be expected to contain new DNA. For example, an engineered Escherichia coli genome could contain fewer than 
10 heterologous genes, which would need to be detected within the rest of genome, which contains more than 
4,000 genes. The high complexity and variability of the gut microbiome composition increases the potential that 
uncharacterized genes present in the sequencing data could be confused with transgenes. 

Even if the sequence of an engineered pathway could be identified in a clinical sample, it may still be difficult 
to trace the attack to the actors responsible. One potential approach would be to attempt to identify the vendor 
that produced the synthesized DNA. However, with DNA synthesis technology becoming increasingly accessible, 
it may become difficult to query all companies capable of producing synthetic DNA. Furthermore, assembly of 
synthetic DNA from nucleotides could obviate the need for DNA synthesis from a commercial provider. While 
investigative work in tracing the engineered microbes to their source is likely to be more informative than focusing 
on the transgenic DNA sequences, the sequences would be extremely important to connecting suspected actors to 
the weapon material, if matching materials in the actor’s laboratory were available. 
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SUMMARY 


• Synthetic biology enables new ways to create harmful chemicals and biochemicals, including 
toxins. 

• Chemicals and toxins produced via manipulation of biological components may be high potency, 
requiring small amounts to cause harm, or low potency, requiring larger amounts. Although syn¬ 
thetic biology can facilitate development in either case, high-potency chemicals or biochemicals 
require less downstream expertise with regard to production and delivery. Producing and delivering 
sufficient amounts of lower-potency chemicals or biochemicals would require greater expertise and 
more advanced technology to achieve both suitable strain performance metrics and production at 
appropriate volumetric scales. 

• The production of chemicals or biochemicals that do not occur naturally (and do not have a pub¬ 
lished known metabolic pathway) requires specific expertise due to the challenges associated with 
enzyme engineering and elucidating and specifying metabolic pathways. 

• In situ production of biochemicals is of higher concern, largely due to limited mitigation capabili¬ 
ties for such a novel approach, including a limited ability to recognize an attack and a potential 
lack of effective countermeasures. 


This chapter considers various ways in which synthetic biology technologies could potentially be applied to 
produce chemicals and biochemicals such as toxins, antimetabolites, small-molecule drugs, or controlled chemicals 
for use in an attack. Broadly, the use of microbes to synthesize agents in situ presents the greatest level of concern, 
the synthesis of agents using naturally occurring metabolic pathways warrants a medium to high relative level of 
concern, and the engineering of novel metabolic pathways poses a medium level of concern. 

It will be important to continue to monitor developments in the manipulation of the human microbiome 
because efforts in the pharmaceutical arena are likely to propel advances and reduce bottlenecks and barriers as 
the field continues to progress (see Table 5-1). Although the level of certainty around the in situ manufacture of 
biochemicals via the gut or skin microbiome is lower than the level of certainty involved in the other metabolic 
engineering processes described in this chapter, manipulation of the microbiome is an active and quickly advancing 
area of research. Overall, this potential capability warrants a higher level of concern, because an attack effected 
through manipulation of the human microbiome could be difficult to recognize and trace. However, understand¬ 
ing of microbiome dynamics is still relatively limited, and it would likely take a relatively high level of expertise 
and many iterations of the Design-Build-Test cycle to develop a microbe capable of colonizing the human host 
microbiome, manufacturing the biochemical in sufficient quantities, and persisting long enough to cause harm. 

The primary drivers of the medium to high relative level of concern for the potential exploitation of naturally 
occurring metabolic pathways are the relatively high level of knowledge available, the relatively low level of tech¬ 
nical expertise required, the availability of multiple delivery mechanisms, and the difficulty of tracing the source 
of an attack. Exploitation of naturally occurring pathways could be an option for attackers because it is easier, in 
general, to use microbes to manufacture complex chemicals or biochemicals than to use chemical synthesis tech¬ 
niques. However, scalability remains a bottleneck, and manufacturing large enough quantities of the chemical or 
biochemical to effect a large-scale attack would require a large organizational footprint. Given this, a more likely 
application of this approach may be to manufacture drugs, such as opioids. The difficulty of this approach also 
depends heavily on the complexity of the chemical or biochemical of interest and of the metabolic pathway for 
producing it. For some target chemicals or biochemicals, an actor may conclude that cultivating the native host 
organism may be more feasible than using metabolic engineering to produce a biochemical in a bioreactor (e.g., 
cultivating Clostridium botulinum instead of heterologous production of botulinum toxin). 

The development of novel metabolic pathways to produce chemicals is a technically challenging proposition 
that would require expertise in both metabolic engineering and protein engineering in order to develop the neces¬ 
sary enzymatic activities, and further efforts to make the novel pathway yield a sufficient amount of product for 
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TABLE 5-1 Bottlenecks and Barriers That Currently Constrain the Capabilities Considered and Developments 
That Could Reduce These Constraints" 


Capability 

Bottleneck or Barrier 

Relevant Developments to Monitor 

Manufacturing chemicals or 
biochemicals by exploiting 
natural metabolic pathways 

Tolerability of toxins to the 
host organism synthesizing the 
toxin 

Pathway elucidation, improvements in circuit design, and 
improvements in host (“chassis”) engineering to make toxins 
tolerable to the host organism synthesizing the toxin 


Pathway not known 

Pathway elucidation and/or demonstrations of combinatorial 
approaches 


Challenges to large-scale 
production 

Improvements in intracellular and industrial productivity 

Manufacturing chemicals or 
biochemicals by creating novel 
metabolic pathways 

Tolerability of toxins to the 
host organism synthesizing the 
toxin 

Pathway elucidation and/or improvements in circuit design 
and/or improvements in host (“chassis”) engineering to make 
toxins tolerable to the host organism synthesizing the toxin 


Engineering enzyme activity 

Increased knowledge of how to modify enzymatic functions to 
make specific products 


Limited knowledge of 
requirements for designing 
novel pathways 

Improvements in directed evolution and/or increased 
knowledge of how to build pathways from disparate organisms 


Challenges to large-scale 
production 

Improvements in intracellular and industrial productivity 

Making biochemicals via in 
situ synthesis 

Limited understanding of 
microbiome 

Improvements in knowledge related to microbiome 
colonization of host, in situ horizontal transfer of genetic 
elements, and other relationships between microbiome 
organisms and host processes 


"Shading indicates developments that are likely to be propelled by commercial drivers. Some approaches, such as combinatorial 
approaches and directed evolution, may allow bottlenecks and barriers to be widened or overcome with less explicit knowledge or 
tools. 


an attack. Multiple iterations of the Design-Build-Test cycle would be required. The difficulty would be reduced 
if the novel metabolic pathway were to use steps, enzymes, or substrates from a naturally occurring pathway, and 
indeed, recent advances in protein design and engineering have rapidly expanded capabilities for engineering 
novel metabolic pathways. The most feasible metabolic routes will be those that have been already demonstrated 
elsewhere (e.g., in the academic literature), because recapitulating an engineered pathway is substantially more 
tractable than developing a pathway from scratch. However, even where biological synthesis is feasible for pro¬ 
ducing controlled chemicals or other products, traditional chemical synthesis may prove to be a more reliable, 
cost-effective, and surreptitious means to do so when the involved pathways are novel. An actor skilled in the 
art of metabolic engineering who is capable of engineering high-titer strains and has access to the right scientific 
resources is expected also to be sufficiently skilled to access, and potentially opt for, these other options. 

Relevant developments to monitor for each of these capabilities are summarized in Table 5-1. 
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Assessment of Concerns Related to 
Bioweapons that Alter the Human Host 


While we typically think about biodefense in terms of either pathogens (Chapter 4) or biochemicals (Chapter 5), 
technological advances are now making possible additional capabilities and means of attack that are more closely 
related to the human body itself. The study included consideration of how increased knowledge about the microbi- 
ome and immune system may enable new means of delivering an agent; the potential for incursions into the human 
host through means not typical of pathogens or toxin-based bioweapons, such as through genetic modification; and 
how genes themselves may potentially be used as weapons. While some of these potential activities overlap with 
the activities discussed in previous chapters, it is valuable to consider them from a host-centric angle to assess how 
advances in knowledge and biotechnology tools might further alter the landscape of vulnerabilities and weapons 
available for exploitation by malicious actors. 

MODIFYING THE HUMAN MICROBIOME 

lHmfMu1liraillTti^hittBI-CldCWiTdoTill&yiMthnMhflnfjiWiniL f i>»hii>mISlh^miLTiftncTinisffr^hniil^Ti'nranIltYjiKiri> 
us, especially those associated with the gut, oral cavity, nasopharyngeal space, and skin. These populations of 
microbes are likely far easier to manipulate than the human host itself, making the microbiome a potentially acces¬ 
sible vector for attack. The human microbiome is the focus of a great deal of academic and commercial research, 
and microbiome manipulation is an area that is rapidly developing, as also discussed in Chapter 5. Several possible 
ways the microbiome could be manipulated to cause harm were considered; these possibilities were analyzed, in 
aggregate, to determine the level of concern warranted. 

Delivery of harmful cargo via the microbiome. As discussed in Chapter 5, the engineering of microorganisms 
to produce hazardous chemicals or biochemicals (including toxins) poses a medium to high level of concern and 
the potential for making chemicals or biochemicals in situ via the microbiome warrants a high level of concern. 
The microbiome could be used as a vector for other types of harmful cargoes, as well. For example, microbes 
could be modified to produce functional small RNAs (e.g., microRNAs [miRNAs]) that could be transferred to 
the host via the gut or skin microbiome 1 to cause a variety of health impacts. 2 Microbes also could potentially 
be engineered to horizontally transfer a genetic cargo to the native microbiome to, for example, cause a host’s 


1 The transfer of small RNAs has been demonstrated in other organisms (Zhang et al., 2012), and small RNAs and other nucleic acids derived 
directly from the diet have been found circulating in higher organisms (Yang et al., 2015). 

2 In human skin, application of anti-tyrosinase siRNAs leads to temporary changes in skin pigmentation (Kim et al., 2012). 
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own well-established microbes to produce a harmful biochemical. In such a scenario the harmful agent would be 
manufactured by organisms in the established microbiome, so the engineered microbe would need to infiltrate and 
persist within the microbiome only long enough to transfer its cargo to a sufficient number of native microbes. 
Thus, this approach would circumvent the challenges associated with establishing engineered microbes in otherwise 
occupied niches. There are many known instances of natural horizontal transfer events that result in the production 
of toxins (Kaper et al., 2004; Strauch et al., 2008; Khalil et al., 2016). It may be possible to harm a population by 
enhancing the spread of vectors or phage (viruses targeting bacteria [Krishnamurthy et al., 2016]) carrying such 
genetic cargoes. Synthetic biology methods could advance such a capability, for example, through the engineering 
of toxin:antitoxin couples that would help ensure retention of plasmids. It is also conceivable that microbes could 
one day be engineered to horizontally transfer genes directly to human cells. 

Use of the microbiome to increase the impact of an attack. The microbiome can also potentially be exploited 
to design a more effective bio weapon or increase the impact of an attack. Knowledge of the human microbiome 
could be used to modify pathogens or their delivery mechanisms to allow more efficient propagation within or 
between populations, for example, by taking advantage of the frequent exchange of bacteria between humans 
and animals. In particular, domestic animals could be used as carriers for engineered agents transmitted via the 
microbiome. For example, engineered dog or cat microbiomes could be established via adulterated feedstocks or 
via purposeful contamination of populations in animal shelters or pet stores and then subsequently transmitted to 
humans. Natural transfers resulting from animal-human contact, such as the transfer of the parasite Toxoplasma 
gondii from cats to humans and the transfer of Campylobacter from dogs to humans, illustrate the feasibility of 
this approach (Jochem, 2017). Similarly, research into the role of the microbiome in pathogenesis could provide 
a roadmap as to how to generate improved pathogens that are better supported by their microbial peers. Studies 
involving wide-ranging transposon- or CRISPR-based deletion libraries of pathogens (Barquist et al., 2013) have 
provided many insights into pathogenesis that might have dual-use implications, and such libraries could prove 
useful in identifying which genes productively or specifically interact with endogenous flora to better establish 
a pathogen. 

In addition to using the microbiome to spread toxins and pathogens, manipulating the microbiome might also 
prove to be a useful adjunct for other biological threats. Recent research shows, for example, that eukaryotic viruses 
utilize bacteria to improve their chances of infection (Kuss et al., 2011). It is also conceivable that an actor could 
introduce an initial agent into a population in order to trigger widespread treatment with broad-spectrum antibiotics 
and then take advantage of the treated population’s “clean slate” to introduce or expand an engineered organism 
via the (now disrupted) microbiome. An actor taking this two-step approach could even incorporate antibiotic or 
antiviral resistance elements into the initial attack. 

■Engin eer'eMM^Mhiosis. Our ever-increasing understanding of the human microbiome may lead to opportunities 
for engineered dysbiosis—that is, the purposeful perturbation of the normally healthy microbiome. This could 
be accomplished either by causing a known dysbiosis or engineering a new one, and in either case would likely 
involve introducing otherwise nonpathogenic microorganisms that then lead to diminutions in human health and 
performance. Since the microbiome likely plays a key role in human immunity (Kau et al., 2011), dysbioses could 
also potentially be used to cause longer-term debilitation of a population’s ability to defend against disease. Gut, 
oral, nasal, and skin microbiomes could be targets for such an approach. The degradation of military readiness 
due to continued operations in harsh climes is an ongoing issue. This situation could be made much worse by 
targeted additions to or alterations of the skin microbiome that lead to heightened chafing, rashes, windburn, and 
itchiness. While these are seemingly minor concerns, over time they could degrade military capabilities to the 
point of impacting readiness. 

The assessment of concerns related to modifying the human microbiome is summarized here and described 
in detail below. 
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Usability of the 

Usability as a 

Requirements of 

Potential for 


Technology 

Weapon 

Actors 

Mitigation 

Level of concern for modifying the human microbiome 

Medium-low 

Medium 

Medium 

Medium-high 


Usability of the Technology (Medium-Low Concern) 

Engineering the microbiome for any of the purposes described above would be difficult in the near term, 
leading to a medium-low level of concern with regard to this factor. Given the current level of understanding of 
the microbiome, the genetic modification(s) required to effect desired phenotypic changes are not yet certain. 
Achieving desired phenotypic results might require the introduction of particular bacterial species or strains and/ 
or particular genetic modifications of these species or strains. In most cases, microbiome engineering is likely to 
be further complicated by the need to make multiple genetic introductions or edits involving multiple symbiotic 
microbiome species. Activities in this area may also be hampered by limited understanding of the genomic diver¬ 
sity and plasticity of microbial communities. Today’s genomic databases are built around consensus sequences 
and do not adequately store or link genomic variations from a single sample. The surprisingly large differences in 
genomic plasticity observed when the U.S. Food and Drug Administration first applied whole-genome sequencing 
to trace an Escherichia coli outbreak underscore the inadequacy of this approach (Eppinger et al., 2011) and also 
suggest the difficulties inherent in engineering the microbiome. 

There are similar barriers to understanding how to rationally manipulate the environment to encourage par¬ 
ticular microbial compositions. For example, the vast differences in human diets worldwide create a plethora of 
different microbial environments that would be difficult to uniformly engineer. Even if insertion of a pathogenic 
microbe were possible, metabolism in culture is so different from metabolism in a host that if a given metabolic 
pathway was altered to achieve a particular phenotype, alternative or secondary pathways might be uniquely 
turned on in the context of a human host, thus potentially damping or thwarting the desired microbiome pheno¬ 
typic engineering outcome. However, the microbiome is an extremely active area of research, and capabilities 
are advancing rapidly, particularly with regard to understanding how environmental perturbations affect species 
representations (Candela et al., 2012; Ghaisas et al., 2016) and with regard to the development of phages to target 
bacteria. It will be important to monitor new developments as the enormous interest in the impact of human com¬ 
mensals on human health continues to drive research and investment and will impact the current bottleneck of 
limited microbiome understanding. 

Usability as a Weapon (Medium Concern) 

There are many known routes for the introduction of bacteria into populations; the gut, mouth, nasal, or skin 
microbiomes could potentially be infiltrated through ingestion, dermal, or other exposure routes via a wide variety 
of avenues, from contaminated food or water to airborne sprays. For the warfighter, the uniformity of the food 
supply chain may make food of particular concern as a vector for attack; additionally, products such as probiot- 

about human microbiomes will also be in a better position for probabilistic targeting of microbiome threats (see 
#80 However, the predictability of the results for manipulation of the microbiome will be 

low and, unlike conventional pathogens, the opportunities for dissemination via human-to-human transmission are 
reduced. On balance, the availability of routes to introduce bacteria tempered by the lack of predictability leads 
to an overall level of medium concern for this factor. 
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Requirements of Actors (Medium Concern) 

The probiotics industry is well established and highly distributed; probiotics are being engineered and manu¬ 
factured by people around the world with relatively low levels of scientific expertise at small-scale facilities using 
basic equipment. Once a successful microbiome engineering approach is established, subsequent production of 
bio weapons could likely be achieved with a relatively small organizational footprint. However, a high level of 
expertise would likely be needed to perform the engineering required. On balance, the expertise required to over¬ 
come the technical challenges in combination with the low organizational footprint leads to a medium level of 
concern for this factor. 


Potential for Mitigation (Medium-High Concern) 

The ability to recognize and respond effectively to an attack involving the microbiome would likely vary 
depending on the approach used. Given the still nascent understanding of the succession of microbial popula¬ 
tions, the targeted manipulation of the human microbiome is, generally speaking, likely to be difficult to detect or 
attribute. The effects of an engineered threat, stealthily introduced, might be easily passed off as part of a normal 
change in microbial composition, particularly if the effects are slow acting or chronic phenotypes (e.g., mental 
health deficits, immune suppression, skin rashes). If an attack were detected, the individuality and plasticity of 
the human microbiome would likely make attribution difficult. Additionally, given the proliferation of facilities 
involved in manufacturing probiotics, it could be difficult to distinguish intentional production of harmful probi¬ 
otics from natural issues arising from contamination or other breakdowns in normal production quality control. 
However, the gut and other microbiomes are robust and regularly reestablish microbial equilibria after perturbation, 
and existing antibiotics may well be an effective countermeasure against engineered microbes. As a result, treat¬ 
ing attack victims could be relatively straightforward, and existing public health and outbreak response measures 
could be well positioned to contain an attack. While the introduction of antibiotic resistance genes might restrict 
the possibilities for treatment, this problem differs little from the traditional concerns over the spread of antibiotic 
resistance in populations and can potentially be overcome through the use of novel antimicrobials, especially in 
small cohorts. The overall level of concern for this factor is medium-high; the high level of concern that such an 
attack would be difficult to detect is reduced somewhat by the ability to treat if it were detected. 

MODIFYING THE HUMAN IMMUNE SYSTEM 

Human immunity is the bulwark for protection against infectious disease. Two basic systems respond to the 
vast array of threats in the natural environment. The first is the innate immune system, a collection of nonspe¬ 
cific protective mechanisms triggered by pathogen-associated molecular patterns, such as lipoteichoic acid from 
Gram-positive bacteria or unmethylated CpG sequences in viral DNA. The second is the adaptive immune system, 
which generates highly specific antibody and T-cell responses tailored to individual diseases and disease vari¬ 
ants. Many natural pathogens manipulate the human immune system, both by suppressing the immune response 
(e.g., immunodeficiency viruses) and by upregulating certain responses (e.g., respiratory syncytial virus, which 
induces the immune system to favor a response involving Type 2 T helper cells [Th2] and subsequently increases 
the proclivity toward asthma [Lotz and Peebles, 2012]). These examples suggest that it may be feasible to develop 
a bioweapon capable of manipulating or “engineering” the immune response. Several potential forms for such a 
bioweapon were considered: 

Engineering immunodeficiency. Manipulating a target population to have decreased immunity could increase 
the impact of a biological attack. This goal could be pursued either by manipulating a pathogen to simultaneously 
reduce immunity and cause disease (Jackson et al., 2001) or by separately introducing an immune-suppressing 
agent and a bioweapon into a target population. Agents used to cause immunodeficiency could be pathogens (e.g., 
the insidious spread of HIV [human immunodeficiency virus]) or chemicals (see NRC [1992] and IPCS [1996] 
for discussions of chemicals that contribute to immunotoxicity). It is also possible that a disease agent could be 
tailored to the immune state of a population, either by engineering the agent to avoid extant adaptive or innate 
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immune barriers or by actually taking advantage of those barriers (for further discussion see Chapter 7, Health- 
Associated Data and Bioinformatics). 

The flip side of engineering immune deficiencies would be to attempt to cause 
immune hyperreactivity. Both pathogens and chemicals have been demonstrated to create a cytokine storm, a 
dangerous state that results from a positive feedback loop in the immune response. It may be possible to engineer 
an agent to purposefully trigger such a cascade. For example, some have suggested that the introduction of anthrax 

responses. The development and testing of new immunotherapies could also provide a roadmap for potentially 
engineering threats; for example, actors could learn from clinical studies in which anti-CD28 antibodies caused 
life-threatening cytokine storms (Suntharalingam et al., 2006). 

Engineering autoimmunity. Natural autoimmune diseases cause significant disability and death. It may be 
possible to engineer a disease that causes the body to turn on itself. Mouse models for the stimulation of auto¬ 
immunity now exist. For example, Experimental Autoimmune Encephalomyelitis, which mimics the symptoms 
of the human malady multiple sclerosis, has been induced in mice by immunization with antigens that cause an 
immune response (autoantigens; see Miller et al., 2007). Normally, such self-immunization is prevented by the 
mechanisms that ensure exclusion of antibodies and T-cells that are self-reactive, but some pathogens may pres¬ 
ent antigens that are similar enough to the body’s own proteins that the original immune response spreads from 
the pathogen to the new human target. Research into checkpoint inhibitors, compounds designed to unleash the 
human immune system to eradicate tumors, could also potentially inform efforts to purposely engineer autoim¬ 
munity. By overstimulating the immune system, checkpoint inhibitors have been shown to lead to autoimmunity, 
often in the form of colitis (June et al., 2017). In addition, particular compounds have been shown to lead to an 
autoimmune disease of the liver (Tanaka et al., 2017, 2018). One potential route of attack could be to introduce 
such compounds via the microbiome. 

The assessment of concerns related to immunomodulation is summarized here and described in detail below. 



Usability of the 

Usability as a 

Requirements of 

Potential for 


Technology 

Weapon 

Actors 

Mitigation 

Level of concern for modifying the human immune 
system 

Medium 

Medium-low 

Low 

High 


Usability of the Technology (Medium Concern) 

It is difficult to predict precisely the impact of engineering on a system as complex as the immune system. 
We are only now beginning to more fully understand the mechanisms for how the immune system recognizes 
foreign antigens, and many immune mechanisms, such as how immune memory guides future responses, remain 
opaque. In addition, much of the research in this area is on animals, and the results do not necessarily map well 
to humans. Furthermore, while there has been an explosion of new research into the causes of autoimmunity, the 
onset of autoimmune disease remains idiosyncratic (Rosen and Casciola-Rosen, 2016), and it would likely be 
difficult to create immunomodulatory weapons capable of causing reliable effects in populations as genetically 
and immunologically diverse as the United States. In particular, while an immune deficiency virus pandemic has 
emerged naturally, engineering the spread of immune deficiency is currently difficult to imagine. 

However, even undirected efforts in this area could be successful enough to warrant concern. In experiments 
in which mousepox was augmented with interleukin-4 (IL-4) (Jackson et al., 2001), earlier studies had already 
discerned that vaccinia virus altered with IL-4 increased virulence in mice (van den Broek et al., 2000), but it came 
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as a surprise that the altered mousepox virus could also overcome vaccination against mousepox. The failed clini¬ 
cal trial of anti-CD28 antibodies, in which patients suffered life-threatening cytokine storms after receiving doses 
500 times lower than those shown safe in mouse models (Suntharalingam et al., 2006), offers another example. 
Although modeling studies indicated that the doses used would nearly saturate the T-cell population of a human 
(suggesting the potential for overactivation), the dramatic outcomes highlight the potential for inadvertent immune 
hyperreactivity as well as the dual-use potential of immunomodulation research. The concept of engineering a 
cytokine storm, especially in susceptible subpopulations, may become a concern when coupled with increasing 
knowledge of the immune system. For example, the growing knowledge of superantigens that hyperstimulate 
immunity could further increase the feasibility of such activities. 

Our understanding of human immunity also represents an increasing, but unknown, area of concern. For 
example, with the advent of next-generation sequencing, the range of both B-cell and T-cell responses to vac¬ 
cines can now be described in molecular detail. Similarly, the effectors of the pattern recognition receptors of the 
innate immune system are being defined to the point that engineering responses, both therapeutic and otherwise, 
are possible (Brubaker et al., 2015; Macho and Zipfel, 2015). In addition, the continuing explosion of work in 
immunotherapy broadly could potentially create a roadmap for the development of immunomodulatory weapons. 
As understanding of this phenomenon improves and as the ability to engineer protein structures improves, the 
opportunities for creating synthetic simulacrum of antigens already known to be present in autoimmune diseases 
will increase. The opportunities to engineer autoimmunity are likely tempered by the diversity of potential auto¬ 
antigens that can be exploited, although this could also be viewed as a means of disease targeting as more and 
more personalized health data become available (see Chapter 7, Flealth-Associated Data and Bioinformatics). 

On balance, given the challenges and both near- and longer-term opportunities, there is a medium level of 
concern with regard to usability of the technology for the variety of ways in which immunomodulation might be 
employed as a bioweapon. 


Usability as a Weapon (Medium-Low Concern) 

The connections between factors capable of influencing immunity and the actual immune response of individu¬ 
als remain poorly understood. Although it is possible to imagine generic degradations to, or overstimulation or 
mis-stimulation of, the human immune system, it will initially be very difficult to target such threats to particular 
individuals or populations, and thereby to have a clear and predictable path to an overall impact on a population’s 
health or on military readiness and response. However, although immunomodulation might not necessarily be the 
most effective approach for an adversary seeking to effect large-scale and immediate death or debilitation, this 
approach could nonetheless undermine a nation’s capabilities. The 1918 influenza pandemic, likely abetted by 
an interplay between viral infectivity and poor public health, was a major factor in military preparations for the 
first World War (Byerly, 2010); this historical example serves as a reminder that a general decrease in immunity 
would even today have strategic consequences for the military machine. Nonetheless, because there are few ways 
to model or manipulate the human immune system other than by carrying out large-scale experiments on humans 
themselves, the amenability of this particular threat to improvement via the Design-Build-Test cycle is minimal, 
and predictability of results is likely to remain a significant barrier in the near term. Therefore, there is a medium- 
low level of concern with regard to this factor with the engineering of delivery systems amenable to delivery of 
immunomodulatory factors an area to monitor. 

Requirements of Actors (Low Concern) 

The expertise required to modulate human immunity with any degree of surety is likely quite high. In particular, 
choosing appropriate animal models for testing immunomodulatory interventions remains an art with only a few 
capable practitioners (Taneja and David, 2001; Benson et al., 2018). Moreover, several of the approaches consid¬ 
ered would require an actor to not only successfully develop and deploy the immunomodulatory weapon itself 
but to successfully plan and execute a multipronged attack in which the immunomodulatory weapon is combined 
with another biological attack (such as deploying a pathogen after an initial attack causing immunodeficiency) or 
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specialized public health knowledge (such as vulnerabilities created by vaccination patterns, see Chapter 7, Health- 
Associated Data and Bioinformatics). Such approaches therefore increase the already advanced level of expertise 
required to effect an immunomodulatory attack, leading to an overall low level of concern for this factor. However, 
fast-advancing research in immunotherapies may reduce some of these barriers and expand the availability of the 
appropriate knowledge and skills in the coming years. 

Potential for Mitigation (High Concern) 

Modulation or evasion of the human immune system is already a hallmark of many pathogens, many of which 
are constantly developing novel means to avoid immune surveillance (e.g., seasonal adoption of new glycosylation 
sites by influenza) (Tate et al., 2014). There are also likely many unknown or undercharacterized pathogens that 
are currently biasing immune responsivity. These natural dynamics would make differentiating between natural 
and synthetic threats a considerable challenge. It may be particularly daunting to identify the hand of a designer 
versus the opportunism of nature in a given epitope in a pathogen variant that leads to autoimmunity. The lack of 
knowledge regarding the mechanisms for discriminating self versus non-self would also increase the challenges 
associated with recognizing an attack and deploying effective countermeasures. For these reasons, there is a rela¬ 
tively high level of concern with regard to this factor. 

Whereas public health measures can potentially be useful in countering a threat involving immunomodulation, 
recognizing a problem and deploying the appropriate countermeasures would not necessarily be easy or quick; the 
slow response to the AIDS epidemic, albeit almost 40 years ago, is a potential cautionary tale in this regard. The 
current state of knowledge regarding immunity is such that it is likely far easier to craft an immunomodulatory 
weapon than an effective response to one. Even if good countermeasures could be crafted, their expense would 
likely be inordinate, especially for more general attacks on population immunity. 

MODIFYING THE HUMAN GENOME 

In addition to using synthetic genes to impact human physiology through pathogens or modifications to the 
microbiome, it may also be possible to insert engineered genes directly into the human genome via horizontal trans¬ 
fer, in other words, to use “genes as weapons .’’(Recent improvements in the ability to deliver genetic information 

cross-species transfer of genetic information into human hosts. In addition to protein-encoding genes, genes that 
encode RNA products such as short hairpin RNAs (shRNAs) or miRNAs could potentially be exploited as weapons 
in their own right. In combination with technologies for the modification of genes or their expression, deepening 
insights into systems biology could open new opportunities for causing diseases that are outside the rubric of the 
types of threats typically focused on in biodefense. Several ways in which synthetic biology approaches could be 
used to horizontally transfer genetic information to a human target to cause harm were considered: 

• Deletions or additions of genes. If researchers can create mouse models of particular disease states based 
on the deletion or addition of particular genes, it follows that if the genomes of human beings could be 
similarly modified, such modifications could potentially cause a wide variety of noninfectious diseases. 
In particular, decades of research on genes associated with oncogenesis—oncogenes—have yielded many 
examples of gene changes that lead to cancer, including via infection by viruses and bacteria (Robinson and 
Dunning Hotopp, 2014; Cui et al., 2015; Sieber et al., 2016). Oncogenes could potentially be horizontally 
transferred to human cells via unnatural means. In this vein, CRISPR/Cas9 has been used to create point 
mutations, deletions, and complex chromosomal rearrangements in germline and somatic cells to develop 
mouse models for cancer (Mou et al., 2015). 

• Epigenetic modifications. Just as programmed genetic modifications are possible, it may also prove possible 
to use horizontal transfer to alter the epigenetic state of an organism in a way that causes harm. Epigenetic 
modifications are clearly of immense importance in gene expression and are implicated in disease states 
and pathogenicity. For example, it is now proving possible to predict the course of oncogenesis based on 
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the epigenetic state of a tumor (Jones and Baylin, 2007). Sequence-specific epigenetic modifications can 
be carried out by small RNAs in other species, such as plants, but are not extensive in humans (He et al., 
2011). However, the sequence-specific binding capabilities of Cas9 and other CRISPR elements may allow 
fusion proteins to carry out sequence-specific epigenetic modifications (Brocken et al., 2017). There are 
also chemicals that yield relatively nonspecific epigenetic changes (Bennett and Licht, 2018). 

• Small RNAs. Small RNAs are another example of functional genetic information that could be horizontally 
transferred. Small RNAs, although not a genome modification per se, are important because they may 
prove capable of modifying gene expression and bringing about phenotypic change. The large number of 
small interfering RNA (siRNA), short hairpin RNA (shRNA), micro RNA (miRNA) (Zhang et al., 2007; 
Huang et al., 2008), and other small-RNA library studies in a variety of species and cells from different 
species, including human, provides a potential roadmap of what sequences may lead to what disease states 
or to modulation of defenses against disease. Similarly, there are already numerous viral and other vectors 
that can encode and express small RNAs. The fact that many viral pathogens already seem to encode 
small RNAs that aid in their pathogenicity further underlines this possibility. For example, the oncogenic 
gamma herpesviruses Epstein-Barr virus (EBV) and Kaposi’s sarcoma-associated herpesvirus (KSHV) 
encode miRNAs that clearly act as mediators of immune suppression (Cullen, 2013). While most gene 
delivery mechanisms would likely be facilitated by CRISPR elements, direct delivery of small RNAs via 
liposomes or other vehicles has proven possible in many cell types (Barton and Medzhitov, 2002; Wang 
et al., 2010; Miele et al., 2012), and more recently the delivery of entire messenger RNAs (mRNAs) has 
proven useful for vaccination and cellular reprogramming (Steinle et al., 2017). Naked RNA is generally 
considered to be fragile due its susceptibility to ribonuclease in the cell, and its delivery is largely confined 
to laboratory settings, but there are approaches for stabilizing RNAs (e.g., using liposomes, nanoparticles, 
synthetic polymers, cyclodextrins, ribonucleoproteins, and viral capsids [“armored” RNAs]) in use for 
many applications. RNA can be expressed from genes delivered as simple expression vectors, as low- 
fitness-burden cargoes on viral pathogens, or via CRISPR element insertion. One reason that RNA delivery 
is potentially a viable biological threat is that even a small initial skew in gene expression (such as the 
changes in gene expression normally caused by miRNAs) could greatly alter the probability of an initial 
cellular alteration. Even small amounts of a targeted RNA would not modify the genome per se, but might 
allow or encourage cells to begin the process of self-transformation to tumors, as evidenced by the fact 
that a large number of pro-oncogenic miRNAs have already been discovered (O’Bryan et al., 2017). In 
addition to RNAs produced by viruses, bacteria produce numerous small regulatory RNAs; introduction of 
these into the endogenous microbiome could lead to dysbiosis. Larger mRNAs can also be delivered via 
liposomes and nanoparticles or by RNA replication strategies being developed for vaccine production (see 
Chapter 8, Rapid Development of Self-Amplifying mRNA Vaccines); these methods could potentially be 
used to express deleterious cargo such as toxins or oncogenes, similar to threats related to DNA vectors. 

• CRISPR/Cas9. CRISPR elements can be harnessed for site-specific cleavage of genes, followed by 

homologous recombination via double-strand break repair or other mechanisms. This technology has 
revolutionized genome engineering. The fact that DNA recognition can be programmed by simple 
modification of an RNA element makes precision targeting of genome change much easier than previous 
technologies such as zinc finger endonucleases and TAL effector nuclease (TALEN)-mediated sequence- 
specific recognition of DNA. Another advantage of CRISPR technology is its broad host range; CRISPR 
elements are able to recognize and bind to DNA sequences in species other than those in which they 
originally evolved. Thus, the fact that gene editing technologies such as CRISPR make possible genomic 
changes in animal models that directly impact health and pathogenesis further implies that it may be possible 
to manipulate either germline or somatic cells to make such changes in humans. Significantly, the sequence 
specificity of CRISPR elements might also make possible ethnospecific targeting of gene-based weapons 
depending on the distributions of alleles (see also Chapter 7, Health-Associated Data and Bioinformatics). 
In terms of delivery, CRISPR elements could potentially be loaded onto a pathogen or delivered via the 
microbiome to modify human genomes in a way that would pose harm to individuals or populations. 
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• Human gene drives. Because of the ability of CRISPR elements to modify genomes, they can be repurposed 

as selfish genetic elements in their own right, wherein their introduction into a naive genome leads to their 

or other homing endonuclease gene, when used as a gene drive, can spread throughout a population. Gene 
drives are well known in nature, such as the Drosophila P element, which moves nonspecifically through 
naive populations based on sexual (vertical) transfer. Gene drives have recently proven to be extremely 
useful for engineering mosquito populations for infertility (Hammond et al., 2016) and they have been 
proposed for the attenuation of fitness in other undesirable species, as well (for more detail, see National 
Academies of Sciences, Engineering, and Medicine, 2016). Concerns related to the use of gene drives in 
human populations were assessed separately from other potential approaches involving horizontal gene 
transfer because fundamental differences in the mechanisms involved in these different types of activity 
engender significantly different levels of concern. The assessment of concerns related to the use of human 
gene drives is summarized below. 



Usability of the Usability as a Requirements of Potential for 

Technology Weapon Actors Mitigation 

Level of concern for modifying the human genome 
using human gene drives 

Low 


Assessment of Concerns About Gene Drives 

For a gene drive to spread in a population, typically many cycles of reproduction are required so that genes 
can be vertically transferred from one generation to the next. Because humans have a relatively long generation 
span due to our age of reproductive maturity, a gene drive would take thousands of years to spread throughout a 
human population in this manner. In addition, some resistance mechanisms to gene drives are already becoming 
apparent as barriers to their use (Champer et al., 2017). In short, because of the fundamental and insurmountable 
constraint of human reproductive cycle length, the level of concern with regard to human gene drives is very low 
and other factors beyond usability of the technology were not analyzed. 

The assessment of concerns related to modifications to the human genome through approaches other than 
through gene drives is summarized here and described in detail below. 



Usability of the 

Usability as a 

Requirements of 

Potential for 


Technology 

Weapon 

Actors 

Mitigation 

Level of concern for modifying the human genome 

Medium-low 

Low 

Medium-low 

High 


Assessment of Concerns About Genome Modifications Other Than Gene Drives 

Usability of the Technology (Medium-Low Concern) 

Engineering genes to infiltrate an individual’s genome and cause harm is likely to be a technically challenging 
endeavor, leading to a medium-low level of concern with regard to this factor. Approaches focused on transient 
horizontal transfer of genes or small RNAs (e.g., via modified viral vectors) could be used, along with systems 
biology insights, to engineer changes in genes or gene expression to cause noninfectious disease, such as cancer 
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or neurological debilitation, or to degrade immunity. For example, the use of engineered pathogens to deliver 
small RNAs that cause healthy cells to initiate tumors may be feasible with current knowledge and technology. 
However, there would be significant challenges to determining the right targets or edits, packaging the genetic 
cargo into viral vectors, and delivering it to appropriate host cells. 

CRISPR-based genome editing technologies are advancing rapidly and could be used to create genetic modi¬ 
fications propagated through engineered pathogenic vectors or horizontal transfer to human cells. However, it 
would likely be difficult to implement such genome modifications, in part because of the size of the protein-based 
machinery required for DNA recognition and cleavage, which would impose a hefty fitness cost on the (likely 
viral) pathogen unless it is linked with the viral life cycle in some way. In other words, viral pathogens have no 
need to cleave genomes, and this would likely limit the viability of viruses carrying genome-cleaving machinery. 
That said, new alternatives to the ubiquitous CRISPR/Cas9 system, such as the smaller Cpfl (Zetsche et al., 2015), 
Staphylococcus aureus Cas (Ran et al., 2015), or newly discovered CasX and CasY (Burstein et al., 2017) could 
reduce this barrier. 

If an actor sought to cause cancer in targeted individuals, it might only be necessary to modify a small number 
of cells to initiate oncogenesis and cause a self-sustaining and potentially metastatic cancer. Thus, the mechanisms 
for delivery could be relatively inefficient and might not require a replicating pathogen for initial distribution. A 
sufficient gene modification could be accomplished, for example, by introducing the ribonucleoproteins (RNPs) 
of CRISPR elements by themselves, rather than as genes, with an accompanying protein translocation domain 
to transit cellular membranes (Liu et al., 2015; Kouranova et al., 2016). This makes a CRISPR RNP potentially 
more akin to a toxin than to a traditional pathogenic biological threat. Similarly, DNA need not replicate to lead 
to expression in cells; there are many circular and linear plasmid vectors that can be transiently transfected into a 
host and thereby provide transient expression of even a large cargo (Nafissi and Slavcev, 2012). This route could 
be used to facilitate delivery of CRISPR/Cas9 and accompanying oncogenic guide RNAs to a host. In addition, a 
number of RNA-based mechanisms for gene delivery have come to the fore as a result of recent thrusts to create 
RNA-based vaccines (Kranz et al., 2016; Pardi et al., 2017). These methods lead to amplification of the originally 
introduced nucleic acid, but do not otherwise spread between individuals. Thus, they could be used to facilitate 
oncogenesis in a specifically targeted population. 


Usability as a Weapon (Low Concern) 

Even were it to become more technologically feasible to use genes to cause oncogenesis, neurodegenerative 
disease, immunological collapse, or other undesirable states, in the absence of a pathogen or greatly advanced 
unnatural horizontal transfer mechanism to promote the dispersal of a gene, the ability of an actor to deliver genes 
for these purposes is limited. Therefore, given this barrier, the concern level regarding usability as a weapon is 
relatively low. The mechanisms of dispersal (other than pathogens themselves) are likely to be low yield, the prob¬ 
ability of inculcation of the disease state is likely to be low, and the onset of the disease state is likely not rapid. 
However, these limitations do not necessarily preclude an actor from pursuing such a weapon, especially since 
such a weapon could still significantly impact morale and readiness. In addition, many of these envisioned genetic 
weapons would become substantially more insidious if the skin rather than the bloodstream could be utilized as 
a route of entry, and improvements in dermal delivery could greatly change the landscape of threat. The use of 
siRNAs as a means of targeting tyrosine hydroxylase or tyrosinase and thereby treating hyperpigmentated scars 
(Xiu-Hua et al., 2010) is instructive as to how this route may be actionable; it will be important to monitor future 
developments in this area. 


Requirements of Actors (Medium-Low Concern) 

Almost all of the technologies that might be instrumental in the use of genes as weapons are still in their 
translational infancy, practiced primarily in research laboratories and not in the clinic. Therefore, the concern level 
with regard to requirements of actors is medium-low. Achieving the types of potential bioweapons envisioned 
would likely require advanced research knowledge and experience, not just technical ability. Even advanced 
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companies that would be best suited for the development of dual-use technologies, such as siRNAs, have yet to 
fully develop delivery methods for desired biomedical applications. One possible exception is the development 
of bioweapons designed to cause cancer; possible approaches for such an attack can be inferred from knowledge 
of how chemicals in the environment have impacted cancer epidemiology and from laboratory data on how to 
induce cancers in animals. An additional caveat is that the rapid spread of technologies for genome engineering 
via CRISPR element toolsets could potentially decrease the barrier to entry for actors. For example, gene edit¬ 
ing could be used to engineer a gene drive into an endemic insect or other pest population to assist delivery of a 
noxious or infectious agent. In this scenario, even a poorly functioning gene drive might not have to be successful 
for very long to achieve an effect. 


Potential for Mitigation (High Concern) 

Overall, the relative level of concern related to the potential for mitigation of gene-based weapons is high. 
Although some types of impacts would be readily recognized and attributed to a purposeful attack, it would be 
extremely difficult to trace some impacts—an epidemic of new cancers, for example—to a bioweapon. Such an 
attack may unfold very slowly, gradually skewing the health of a population. This would make mitigation very 
difficult, as presaged by experiences with identifying, tracing, and addressing cancer epicenters near toxic waste 
sites over the past several decades. The considerable challenge of mitigating an intentional cancer epidemic is a 
primary driver for the high level of concern relating to mitigation for this potential threat. However, once a threat is 
recognized, established mitigation methods such as quarantine and potential new ones such as therapeutic genome 
editing could be effective against some types of gene-based weapons. 

Given that exome sequence data are being generated at an exponential rate, the introduction of CRISPR ele¬ 
ments in humans or other higher organisms would likely be identified quickly and immediately recognized as 
cause for alarm. The presence of previously unknown oncogenes in viruses not normally known to harbor onco¬ 
genes would also be an immediate cause for alarm. However, the surreptitious spread of an oncogenic small-RNA 
sequence, especially if it is embedded within a protein-encoding gene, might be less noticeable and thus evade 
detection. 


SUMMARY 


• The alteration of humans through mechanisms that are different than conventional pathogens is an 
important potential concern area. The reduction or removal of key bottlenecks and barriers in the future 

• As understanding of microbiomes increases, the possibility of misuse also increases, and it may become 
feasible to use synthetic biology to engineer the microbiome to transfer toxic genes, debilitate human 
immunity, improve pathogen entry or spread, or create dysbioses. 

immune system. 

• Strategies to modify the human genome or alter gene expression in undesirable ways include gene 

While the traditional biodefense paradigm places agents such as pathogens or chemicals at the center of con¬ 
siderations of threat and vulnerability, this chapter attempts to reshape that paradigm by considering how interplay 
with and potential modifications of the human host might change the threat landscape. As understanding of the 
human microbiome, human immunity, and the human genome increases, the possibility of misuse also increases. 
In addition, advances in the understanding of individual genetic variability and in the ability to exploit individual 
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variation may make it more feasible to target host-modifying attacks to individuals or subpopulations (further 
discussed in Chapter 7, Health-Associated Data and Bioinformatics). 

The current state of knowledge of the human microbiome is rapidly increasing, and it may be feasible to 
use synthetic biology to engineer the microbiome to transfer toxic genes, debilitate human immunity, improve 
pathogen entry or spread, or create dysbioses. However, with the exception of the in situ production of a hazard¬ 
ous compound (as detailed in Chapter 5, Making Biochemicals Via In Situ Synthesis), these potential threats are 
of lesser concern than more traditional pathogen- and chemical-centered attacks. Despite being an active area of 
research, the microbiome is still not fully understood, and creating a microbe that could colonize and persist within 
an established commensal community is a significant challenge. Furthermore, the judicious use of antibiotics could 
be an effective countermeasure to attacks propagated through the microbiome. Indeed, given the strong push to 
improve human health via microbiome research and engineering, there may be far more robust opportunities for 
microbiome-based countermeasures than threats. 

The overall concern posed by human immune modulation is similar to the overall concern posed by micro¬ 
biome engineering, and for similar reasons. On the one hand, current knowledge limitations likely preclude this 
potential vulnerability from being exploited in a significant way in the near future. On the other hand, knowledge is 
accumulating at such a rapid clip that it may well become more feasible to predictably modify the human immune 
system, and the expertise needed to do so is likely to become more widespread in the coming years. In addition, 
even unpredictable modifications can still cause harm. While it could have been predicted that IL-4 insertion into 
the mousepox genome would lead to the virus’s ability to overcome vaccination (Mtillbacher and Lobigs, 2001), 
it is still unknown whether the same type of modification in a human variant of a virus would have similar dire 
consequences. In contrast, the development of an anti-CD28 antibody was judged safe enough based on the rigor¬ 
ous review accorded clinical trials, yet proved to be life-threatening (Suntharalingam et al., 2006). Overall, the 
engineering of hyperimmunity and subsequent pathogenesis seems a greater threat than the engineering of reduced 
immunity or autoimmunity. The former is acute and fits more readily with individual pathogens and weaponization 
scenarios; the latter are chronic and with enough foresight can potentially be dealt with at a societal level via the 
usual public health measures for containing communicable diseases. 

Building on that analysis, while the assessment focused on the human immune system, it is important to keep 
in mind that there are other potential systems that may also prove to be vulnerable to manipulation. For example, 
human neurobiology is immensely complex, and there are already a variety of genetic and chemical means to 
manipulate the overall mental health of individuals. That said, it is difficult to engineer such systems for a par¬ 
ticular outcome with any surety. It will be important to continue to monitor advances related to understanding and 
modifying these complex systems in the coming years. 

The concept of genes as weapons encompasses the development of synthetic genes that could change human 
physiology, either on their own or potentially delivered as an augment to a known pathogen. This concept also 
encompasses the possibility of delivering synthetic genes for small RNAs (or the synthetic small RNAs themselves) 
that could impact host physiology via interference mechanisms. Genes have a unique position in the biological 
threat pantheon, being somewhere between pieces of genomes, in which case they can be considered as just parts 
of pathogens, and being toxins, chemical compounds capable of harm without necessarily replicating. There are 
multiple difficulties that surround their delivery and a limited number of military scenarios in which an adversary 
would find it worthwhile to alter human physiology over time frames longer than a single battle or campaign. 
That said, some scenarios, such as the use of dermal transfection to create shRNAs or miRNAs that alter human 
physiology, or the use of gene drives to alter insect populations to deliver noxious compounds to humans, may 
present more attractive options from the perspective of an adversary. 

In addition, threats related to horizontal gene transfer in synergy with the threats posed by pathogens may 
lead to new modes of attack. Just as clinical trials of immunotherapies are increasingly a roadmap for engineer¬ 
ing cytokine storms, the increasing knowledge on gene deletions, gene additions, and small-RNA modifications 
of human cells may provide a roadmap for the induction of noninfectious disease states that could be abetted 
by pathogen engineering (and, conversely, that could abet the spread of the pathogens themselves, such as via 
immunodeficiency viruses). 

Relevant developments to monitor for each of these capabilities are summarized in Table 6-1. 
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TABLE 6-1 Bottlenecks and Barriers That Currently Constrain the Capabilities Considered and Developments 
That Could Reduce These Constraints" 


Capability 

Bottleneck or Barrier 

Relevant Developments to Monitor 

Modifying the human 
microbiome 

Limited understanding of 
microbiome 

Improvements in knowledge related to microbiome 
colonization of host, in situ horizontal transfer of genetic 
elements, and other relationships between microbiome 
organisms and host processes 

Modifying the human immune 
system 

Engineering of delivery system 

Increased knowledge related to the potential for viruses or 
microbes to deliver immunomodulatory factors 


Limited understanding of 
complex immune processes 

Knowledge related to how to manipulate the immune system, 
including how to cause autoimmunity and predictability across 
a population 

Modifying the human genome 

Means to engineer horizontal 
transfer 

Increased knowledge of techniques to effectively alter 
the human genome through horizontal transfer of genetic 
information 


Lack of knowledge about 
regulation of human gene 
expression 

Increased knowledge related to regulation of human gene 
expression 


"Shading indicates developments that are likely to be propelled by commercial drivers. Some approaches, such as combinatorial approaches 
and directed evolution, may allow bottlenecks and barriers to be widened or overcome with less explicit knowledge or tools. 
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Related Developments That May Impact 
the Ability to Effect an Attack Using a 
Synthetic Biology-Enabled Weapon 


Synthetic biology is a sophisticated, programmable platform that could in theory enable the development of 
a wide range of biological and chemical weapons. However, for a capability to warrant concern in the context of 
this study, it must not only be possible to create an agent in the laboratory but also to use the agent to effect an 
attack. For many of the potential malicious applications of synthetic biology that were considered, the level of 
concern raised by technological capabilities is tempered by constraints related to the need to produce the agent in 

other modern biotechnologies, these requirements, many of which are the same barriers to weaponization that 
have constrained the development of bioweapons in the past, are in many cases an important limiting factor in the 

However, these challenges may well be overcome in the future, either by advances in synthetic biology or by 
developments in other fields. This chapter explores some developments that may become more important in this 
respect in the coming years. While a comprehensive analysis of technologies being pursued outside of synthetic 
biology was not conducted as part of this study, these examples are offered to highlight a few areas that will be 
important to monitor, because they could converge with synthetic biology advancements and ultimately reduce or 
eliminate barriers to the use of synthetic biology-enabled weapons. 

BARRIERS TO THE USE OF BIOWEAPONS 

Within the factor usability as a weapon, the report’s framework for assessing the potential for the weaponiza¬ 
tion of agents produced using synthetic biology identifies questions around production, fidelity, stability, delivery, 
testing, and targeting. Aspects of these attributes as they relate to specific potential applications of synthetic biology 
are discussed in Chapters 4-6; broader challenges and considerations related to them are described briefly in the 
following sections. In general, the challenges posed by each attribute largely depend on the potential nature and 
scope of an intended attack, which could range, for example, from a targeted assassination of one individual to 
mass casualty across a population. Although a variety of potential circumstances were considered in the assessments 
presented in this report, it was generally assumed that an actor would seek to develop the bioweapon covertly and 
minimize the likelihood of attribution once the agent is deployed. However, the possibility of assigning attribu- 
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tion for a biological attack is not necessarily a deterrent for terror groups, who may choose to affirm their own 
responsibility or power and who may not fear discovery and subsequent retribution. 

Production 

Challenges associated with agent production largely depend on the quantity desired. Large-scale production 
of a bioweapon is extremely challenging because many agents lose infectivity or other features during scale-up. 
Although synthetic biology technologies may enable improved cell culture methods, innovations in fermentation, 
and improved ways to mass produce particular chemical and biological components, the large-scale production 
of bioweapons is still likely to require significant financial and intellectual resources. On the other hand, mass 
production may not be needed to perpetrate smaller, more narrowly focused attacks or attacks that can be spread 
by a replicating pathogen. 


Fidelity and Testing 

Although it is possible to design and build biological constructs or systems without testing, significant synthetic 
biology achievements are typically rooted in repeated Design-Build-Test cycles, with testing being a crucial step in 
the process. Testing in computer simulations, cell cultures, or animal models is a labor- and time-intensive process, 
and learning from the testing process to make design improvements for the next Design-Build-Test iteration can 
require a great deal of expertise and experience. Success in computer simulations, cell cultures, and animal models 
does not necessarily guarantee success in humans, because of differences in evolutionary pressures. Fidelity is also 
not guaranteed, and it can take repeated process improvements to develop a system that will reliably produce the 
same results every time, especially at scale. Some synthetic biology approaches, such as directed evolution, inte¬ 
grate testing together with other steps in the process, potentially offering a more streamlined option to circumvent 
resource-intensive testing steps. It is also conceivable that malicious actors would forego some of the rigorous 
testing that other researchers would perform, since the standard of success—creating an agent capable of doing 
“enough” harm—is markedly different from the standards involved in publishing results in a scientific journal. 
Malicious actors may also be able and willing to test in human subjects, unhindered by the moral considerations 
and ethical frameworks that guide other research efforts. Despite these caveats, however, developing a synthetic 
biology-enabled bioweapon would likely still require significant testing to achieve a product that is reliable and 
effective enough for the actor’s purposes. 


Delivery 

A critical consideration in the development of a bioweapon is the capability to deliver it to the intended target 
population. At smaller scales, delivering a bioweapon can be as simple as contaminating food or water, sticking 
victims with a needle, or even smearing the agent on victims’ skin (CBC, 2017). Larger-scale attacks typically 
involve some form of aerosol dispersal, such as via a spray or an explosion, which may require that the agent not 
only be prepared at the optimal particle size for inhalation but also be able to withstand freeze drying, suspension 
in aerosol preparations, packaging processes, long-term storage, and adverse environmental conditions such as 
ultraviolet sunlight or extreme temperatures (Frerichs et al., 2004). Such requirements may impose significant 
barriers to bioweapon development, even with available biotechnologies. While synthetic biology could potentially 
be used to increase a pathogen’s environmental stability, infectivity, transmissibility, or tolerance for weapons 
delivery systems, maintaining potency or viability throughout the production, storage, and delivery process is still 
likely to present a significant challenge, particularly for large-scale attacks. 

The agent’s ability to be transmitted from one individual to another is an important consideration in terms 
of both production scale and delivery. A communicable agent could theoretically be deployed in small amounts 
at multiple locations and allowed to spread on its own. Some actors may even find volunteers willing to spread 
infection by becoming infected themselves, akin to suicide bombers. 
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Targeting 

Attacks may target individual people; groups of people who share a common geography, occupation, ethnicity, 
or other attribute; or entire populations. Historically, targeting of bioweapons has been based largely on geographic 
location of the intended victims. Biotechnology advances may offer new opportunities for a malicious actor to 
influence the overall impact of an attack or the specific individuals affected, such that an agent could be deployed 
over a broad geographic area but only sicken targeted individuals. For example, actors may consider designing a 
bioweapon to target particular subpopulations based on their genes or prior exposure to vaccines, or even seek to 
suppress the immune system of victims to “prime” a population for a subsequent attack. These capabilities, which 

widespread availability of health and genomic data. While some fundamental barriers still likely limit the success 
and reliability of such an effort—for example, the United States’ genetic diversity may make the U.S. population 
resistant to targeting based on ethnicity—it is nonetheless crucial to continue to monitor developments that could 
facilitate targeting of particular populations. 

RELEVANT CONVERGENT TECHNOLOGIES 

The challenges associated with effecting an attack using a synthetic biology-enabled weapon may be overcome 
by emergent (new) or convergent capabilities. In the context of technology, convergence occurs when different 
technologies, often from different fields, create synergies that significantly advance capabilities when they are 
combined (Roco, 2008). In other contexts, convergence has been described as the formation of a framework to 
solve scientific and societal challenges that exist at the interfaces of multiple fields (NRC, 2014). In either con¬ 
ceptualization, the merging of diverse areas of expertise can stimulate innovation, from basic science discovery to 
translational application, which can advance beneficial and malicious goals alike. Convergence can happen through 
gradual advances over time or occur quite suddenly, taking everyone by surprise. This study considered how devel¬ 
opments in multiple fields may converge with biotechnological developments to enable new breakthroughs in the 
Design-Build-Test cycle or act as “force multipliers” in advancing synthetic biology capabilities. Convergence, of 
course, can go both ways; as synthetic biology incorporates technologies from other fields, so too will other fields 
incorporate approaches from synthetic biology, potentially leading to more interdisciplinary collaboration and 
further breakthroughs. While synergies among technologies are included in the framework within usability of the 
technology, it is useful to consider how emergent and convergent technologies may allow breakthroughs specifically 
in aspects relevant to weaponization, since these factors are thought to be in many cases a significant limitation. 

To that end, several examples were identified to explore technologies being pursued in fields and toward 
ends that are not directly related to synthetic biology, yet may converge with biotechnology in ways that help 
overcome some of the challenges related to creating weapons with synthetic biology. These include gene therapy, 
nanotechnology, automation, additive manufacturing, genomic data, and health informatics. The potential impacts 
of these technologies are discussed below and summarized in Table 7-1. 

Gene Therapy 

Gene therapy has been in development for use in therapeutics for several decades (Moss, 2014), and it can 
take a number of forms. In an approach known as ex vivo gene therapy, tissues are genetically altered in the cell 
culture and then transplanted into the body (Hacein-Bey-Abina et al., 2002). Although ex vivo gene therapy is not 
likely a viable approach for delivering bioweapons, the ability to transduce cells and tissues ex vivo could inform 
vector improvement and design and provide proof of principle for novel means of delivering substances, thereby 
providing an in vitro test capability for small-scale bioweapon design and development. 

Another approach, known as in vivo gene therapy, might have other implications for bioweapons development. 
Using this approach, a component (usually a viral vector) is introduced into the body, potentially to a specific target 
tissue, where it delivers genetic material that creates the desired therapeutic function (Naldini et al., 1996; Kay et 
al., 2001). Viral vectors are typically chosen as the delivery vehicles because of their naturally evolved ability to 


Copyright National Academy of Sciences. All rights reserved. 


Biodefense in the Age of Synthetic Biology 


88 BIODEFENSE IN THE AGE OF SYNTHETIC BIOLOGY 


TABLE 7-1 Summary of How Selected Examples of Convergent Technologies May Affect Challenges of 
Effecting an Attack Using a Synthetic Biology-Enabled Weapon" 


Production Stability 

Fidelity Testing 

Targeting Delivery 

Gene therapy 


Nanotechnology 


Automation 


Additive 

manufacturing 



Health informatics 



“Shading indicates which attribute each example aligns with most closely. 


target specific cells of the human body; their disease-causing genes are removed and replaced with the engineered 
genetic components. As gene therapy viral vectors continue to be optimized for therapeutic use, their capability 
to act as delivery vehicles for bioweapons, such as toxin-producing pathways (as discussed in Chapter 5, Making 
Biochemicals Via In Situ Synthesis) will advance apace. 

Gene therapy vectors being researched include adenovirus, adeno-associated viruses, alphaviruses, herpesvi¬ 
ruses, retrovirus/lentiviruses, and vaccinia virus (see Table 7-2); gene therapies using retroviruses, adeno-associated 
virus, and adenoviruses have already advanced to human clinical trials (Edelstein et al., 2007) and in some cases 
to clinical approval (FDA, 2017a,b; Spark Therapeutics, 2017). The ability of these vectors to transfer genes into 
cells and the permanence of the edits they make differ from vector to vector. The size of the viral genome is also 
important, because the size of the engineered gene that can be transferred is limited to what the virus can success¬ 
fully carry. While problems such as host immune responses, off-target effects, and decay of continued expres¬ 
sion have been barriers to successful gene therapy (Verma and Somia, 1997; Mingozzi and High, 2013), work to 
address these barriers is being conducted and these challenges might not be of concern to an actor seeking to use 
the approach to deliver a bioweapon as long as the intended victims experience the intended illness or lethality. 
As gene therapy vectors continue to be made more efficient and coaxed to carry larger transgenes, gene therapy 
research could pave the way toward circumventing some of the barriers related to delivery of bioweapons. 

Most gene therapies today are delivered via injections to target tissues, a route ill-suited to stealthy or wide¬ 
spread delivery of a weaponized gene therapy vector (though perhaps a viable strategy for targeted assassination). 
The development of inhalable gene therapy is advancing rapidly, however, particularly for treatments of respiratory 
diseases such as chronic obstructive pulmonary disease and cystic fibrosis (Zarogoulidis et al., 2013). Advances 
such as these may provide more expanded capability in the future as the aerosol therapy market continues to drive 


TABLE 7-2 Characteristics of Viral Vectors Used in Gene Therapies 


Characteristic 

Adenovirus 

Adeno-Associated 

Virus 

Alphavirus 

Herpesvirus 

Retrovirus/ 

Lentivirus 

Vaccinia 

(Poxvirus) 

Genome 

dsDNA 

ssDNA 

ssRNA (+) 

dsDNA 

ssRNA (+) 

dsDNA 

Genome size 

39kb 

5kb 

12kb 

120-200kb 

3-9kb 

130-280kb 

Host genome 
integration 

No 

No 

No 

No 

Yes 

No 

Transgene 

expression 

Transient 

Potential for 
long lasting 

Transient 

Potential for 
long lasting 

Long lasting 

Transient 

Maximum size of 
transgene(s) 

7.5kb 

4.5kb 

7.5kb 

30kb 

8kb 

25kb 
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innovation for therapeutics. Efforts toward aerosolized delivery of vaccines are also advancing rapidly; this research 
may contribute to innovations in routes of delivery for gene therapies (Low et al., 2015). As these technologies 
progress and new therapeutics come to market, facilities manufacturing aerosolized therapeutics are likely to pro¬ 
liferate, raising the possibility not only that such approaches may be misused for the creation of bioweapons but 
also that apparently aboveboard manufacturing facilities could mask subversive programs to develop bioweapons 
delivery systems. 

Although the viral vectors used in gene therapies are heavily engineered to remove the genes that cause 
disease and these viruses are used under exacting conditions that guard against spread, viruses have a history of 
evolving around constraints, and it remains possible that a single-use gene therapy vector could become “lytic,” 
leading to the spread of a disease. This is of limited concern for work involving many of the viruses in Table 7-2, 
which have often been heavily engineered to not propagate in the host. However, there has been a rise in the use of 
viruses, especially measles and vaccinia, for so-called oncolytic therapies in which the virus replicates in a cancer 
cell and spreads to surrounding cells (Haddad, 2017). Future studies that chart the evolution of oncolytic viruses 
in human hosts could potentially become roadmaps for the design and construction of effective bioweapons, if 
only because they bring into high relief the characteristics of the virus that have the greatest impact on tropism, 
spread, and pathology. 


Nanotechnology 

Nanotechnology is driving innovations in the delivery of gene therapies and other therapeutics. Actors with 
access to nanotechnology tools could adapt these platforms for malicious use, with implications for delivery of 
pathogens or toxins as well as targeting attacks. Smaller vehicles in general have much better pharmacokinetic and 
pharmacodynamic properties, making them more effective in penetrating tissues and cells. Nanoparticles used in 
drug formulations include imprinted polymers, dendrimers, vesicles, nanospheres, nanocapsules, micelles, carbon 
nanotubes, liposomes, and nanoemulsions (1AP, 2015), and additional nanocarriers are also being researched, 
including DNA- and viral-based systems. 

Engineered nanotechnology could be used to assist in the weaponization of an agent in numerous ways (Kosal, 
2009). For example, nanotechnology could be used to create microcapsules or nanocapsules that encase the agent 
and improve stability or delivery (Koroleva et al., 2016); to make delivery particles more environmentally stable; 
to create storage devices for biological products; to create specialized nanoparticles that respond to ultraviolet light 
(Jalani et al., 2016), are activated remotely, or are engineered to evade the immune system (Zolnik et al., 2010; 
Rodriguez et al., 2013); to confer the ability to penetrate skin or invade into tiny bronchioles in the lung, cross the 
blood-brain barrier (Saraiva et al., 2016), or target other specific tissues; or to provide advanced aerosolization 
capability. An example of one nanoparticle formulation and its use as a delivery platform is discussed in Box 7-1. 

Automation 

In biology, the growth of automation is evident in the 
integration of technologies such as microfluidics, mass spectrometry, bioinformatics, and machine learning into 
laboratory processes. Automation tools allow researchers to screen ever-larger collections of genetic sequences or 
physical samples for a wide variety of properties; it is now possible to produce and screen hundreds of thousands 
of clones and variants in a matter of weeks. Malicious actors could take advantage of these capabilities to, for 
example, streamline testing of agents, increase fidelity, and fine-tune targeting, potentially while evading mecha¬ 
nisms to detect or screen for malicious activity. Although sequence annotation is becoming more precise, many 
algorithms must still use unvalidated and unverified data (Poptsova and Gogarten, 2010). This creates “noise” in 
the system that could inform the design of bioagents or allow malicious actors to undermine legitimate research 
by, for example, deliberately submitting incorrect genomic data to public databases to mask one’s own work or to 
sabotage the detection efforts of others. 

Standard laboratory robotics is now within the reach of virtually any laboratory. By enabling massively scaled- 
up experimentation and testing, these tools can significantly shorten the time frame of the Design-Build-Test cycle 
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BOX 7-1 

Nanolipoprotein Particles as an In Vivo Delivery Platform 

As part of its information-gathering process, the committee received a presentation by Amy Rasley, 
Ph.D., Lawrence Livermore National Laboratory, on nanolipoprotein particles (NLPs). NLPs are a biomi- 
metic platform enabling in vivo delivery of various nucleic acids, proteins, carbohydrates, and small organic 
compounds. They are created as a circular lipid bilayer “raft” composed of amphipathic (both hydrophobic 
and hydrophilic) phospholipids held together by a scaffold composed of amphipathic lipoproteins. 

NLPs are created with biocompatible components to avoid the target organism’s immune system (i.e., 
the scaffold proteins are chosen to match the proteins of the target organism). NLP assembly is facile and 
can be easily scaled up. NLPs can also be lyophilized, thus avoiding the need for cold-chain storage. The 
size of NLPs can range from 8 to 25 nanometers, permitting them to be tuned for delivery by a variety 
of routes (e.g., inhalation, injection). They are also versatile, capable of being conjugated with proteins, 
peptides, oligonucleotides, carbohydrates, or small organic compounds. 

All components of NLPs can be produced synthetically without the use of any living systems, and 
NLPs can be customized for specific applications whose payloads vary drastically in terms of size, charge, 
hydrophobicity, and functionality. There is thus a wide range of flexibility and possible uses of NLP technol¬ 
ogy for medical therapeutic purposes and also the potential for misuse of NLP technology as a delivery 
platform for harmful agents. Detection of bioweapons using NLPs would be difficult, since the scaffold 
protein would be a native human protein, the NLP half-life in vivo is short, and NLPs are not self-replicating. 

SOURCE: Fischer et al., 2013, 2014. 


overall and potentially improve the likelihood of producing the desired biological functionality. Microfluidic tools, 
which provide the capability to handle small volumes, control laminar fluid flows, and measure perturbations 
and timescales within biological systems, are becoming particularly common and are used in a wide variety of 
research arenas, including drug development and the development of sensors for detecting biomarkers, biohazards, 
or pollutants (Dittrich and Manz, 2006; Berkeley Lights, 2017). In synthetic biology, microfluidics tools are being 
adopted to make the testing of biological products or systems fast, inexpensive, and robust. By facilitating testing 
of many agents at small scale and potentially low cost, these tools could provide malicious actors the capability to 
develop bioweapons by systematically incorporating multiple genetic variations to synthesize and screen multiple 
variants (a combinatorial approach) rather than a precise, knowledge-based approach. In addition, the automa¬ 
tion of protein design, enabled by mass spectrometry, potentially allows hundreds of thousands of variants to be 
tested, assessed, and used for refining the design of protein properties via machine learning algorithms (Huang 
et al., 2016). The combined use of automated design with microfluidics can potentially enable an actor to rapidly 
develop and test multiple versions of a potential agent at small scale, at low cost, and with relatively limited prior 
knowledge of how to engineer the desired phenotypic result. For desired results such as lethality, combinatorial 
design and screening could also provide enough confidence in the behavior of an agent that the actor may not 
need to pursue larger-scale testing, as well as provide a way to achieve proof of principle for facilitating fidelity 
during production scale-up. Finally, microfluidics in particular can also create synergies with other areas such as 
nanotechnology by facilitating the creation of homogeneous nanoparticles for agent delivery. 

Additive Manufacturing 

Additive manufacturing technologies, also known as 3D printing, have emerged to create advanced materi¬ 
als with superior performance, lower environmental impacts, or new functionalities. A variety of materials with 
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complex biological architectures have been successfully emulated in synthetic systems, such as spider silk and 
leather (Qin et al., 2015). Although the vast majority of commonly available 3D printing technologies have been 
unable to sustain living cells, this capability is rapidly advancing (Richards et al., 2013). Examples include the 
development of 3D printers to generate replacement organs or pharmaceutical testing tissues such as livers and 
hearts (Robbins et al., 2013); the use of a modified inkjet printer to print layers of Escherichia coli (Lehner et al., 
2017); the printing of viable natto bacteria into clothing (Yao et al., 2015); and the proposed use of 3D printing 
to generate oncolytic viruses (Swenson, 2015). 

It is conceivable that one could produce, with biological 3D printing, engineered microbes, viruses, toxins, 
or other biological products. This capability could also be used to create biological material that could be used 
as a platform to test bioagents at relatively low cost, or to explore techniques for ensuring bioagent fidelity. Such 
activities could likely be pursued surreptitiously, because the creation of a small amount of a highly infectious 
bioagent using a 3D printer would be hard to detect. 

Currently, 3D printers tailored specifically for biologicals are still rather expensive and require high expertise; 
they are not available to the public in libraries and other common spaces as plastics-based 3D printers are. However, 
as the technology continues to advance, costs may decrease and these devices may become more widely available. 

Health-Associated Data and Bioinformatics 

In the era of genomics, it has become increasingly feasible to design medical therapeutics tailored to the 
genetic makeup of an individual or a population. This approach, known as “precision medicine,” relies on the 
ability to amass large amounts of human genomic data. Sequence data alone are not sufficient, however; it is 
also necessary to understand genotype-phenotype functional relationships, which often entails tracing epigenetic 
modifications, metabolism, and changes in protein expression in response to environmental or other factors. The 
data necessary for such insights can be extracted from blood tests, urinalysis, and a range of other data points 
stored in individual health records. 

Approaches that attempt to link human genomic data with other health metadata are becoming the preferred 
models for the pharmaceutical industry, making this an extremely active area of research. Not only does this 
facilitate the pursuit of many more “precise” drug targets, but genomic data, in the context of health metadata, 
can also allow for reverse engineering approaches for the synthesis of novel small molecules with therapeutic 
potential (Kim et al., 2016). 

None of these approaches is possible without sophisticated bioinformatics and machine learning capabilities 
that link, correlate, and analyze the data. Such sophisticated techniques also are highly dependent upon having 
enough correctly annotated data to be able to determine the biomarkers needed to identify specific human condi¬ 
tions of interest. This is likely to present a barrier, particularly for rare or complex multivariant conditions; the 
existence of more than 5 million known human genetic polymorphisms (Hall, 2011; but GHR [2018] estimates as 
high as 10 million) hints at the difficulties of trying to determine causative disease factors even with thousands 
of well-curated patient samples. 

While the tailoring of diseases (or spread of diseases) to subpopulations or individuals would not be an exact 
science, a relatively sophisticated adversary could seek to exploit genomic and health data. The use of genomic 
data, health metadata, and tailored bioinformatics will continue to advance in the realm of pharmaceutical research, 
and these advances could enable enhanced targeting capabilities for the development of bioweapons. The vast 
amount of healthcare data that are now available electronically and the multiple documented incursions into those 
data, including by foreign powers (Krebs on Security, 2013; Ponemon Institute, 2013; Filkins, 2014; Perakslis, 
2014), raises the possibility that an adversary could bypass cybersecurity barriers, identify unique vulnerabilities 
for specific subpopulations, and then develop bioweapons tailored to target those vulnerabilities. For example, 
this approach could be used to develop ethnospecific bioweapons. Retroviruses integrate into the genome upon 
infection, and the integration mechanisms of these viruses could theoretically be altered to greatly favor one 
genotype over another. Similarly, the existence of population-specific differences in the sequences and structures 
of receptor proteins suggests that computational modeling, high-throughput screening, or directed evolution could 
be used to more finely direct an agent to target a specific subpopulation. While such targeting might be more 
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readily accomplished with known genetic subtypes (such as ethnic subgroups), it may also be possible to target 
geographic regions or nation-states semiselectively based on allelic distributions in human populations. It may 
even be possible to drive targeting to an even finer level, raising the specter of “personalized terrorism.” 

An increasing knowledge of the human immune system and the ranges of individual responses to diseases 
also may open opportunities for probabilistic targeting of subpopulations. The ethnic prevalence of preexisting 
pathogens or the national prevalence of immunotypes (due to vaccination strategies in different countries) could, 
for example, be exploited in the design of bioweapons targeted to individuals with certain disease or vaccine expo¬ 
sures. General engineering of lowered immunity (discussed in Chapter 6, Modifying the Human Immune System) 
could lead to additional local endogenous viral reactivation. Similarly, given the somewhat regional nature of even 
highly cross-reactive allergens, knowledge of a subpopulation available from (stolen) health records might provide 
clues for probabilistic targeting of anaphylactic shock. 

More insidiously, it is possible that some diseases could be engineered not only to target but to actively take 
advantage of known immune prevalences, in particular those related to vaccination. An extremely sophisticated 
adversary, knowing in advance the likely fitness landscape of a given pathogen, could release an engineered patho¬ 
gen that is “designed to evolve” in particular ways upon encountering the most likely human immune response. 
For example, if an immunodominant epitope is known, and if previous modeling or experimentation had indicated 
the range of likely sequence substitutions in response to the antibodies already present due to vaccination, and if 
some of these sequence substitutions lead to increased engagement with a cell surface receptor, then the sequence 
of the pathogen could be poised in advance to evolve greater lethality or transmissibility. The advantage of this 
approach, from a malicious actor’s perspective, is that a milder form of a disease could spread broadly and then 
“self-activate” as a result of “designed evolution” to become a pandemic. As noted in Chapter 4, however, design¬ 
ing such a “new” pathogen is currently far from feasible. 

The probabilistic targeting of a disease to unique subpopulations could be used to drive particular military 
outcomes. Although chicken pox vaccination reduces the importance of this particular example, if a large fraction 
of a given military cadre is known to have been exposed to a virus such as varicella zoster virus (which causes 
chicken pox) and is thus at risk to develop a subsequent disease such as shingles, attempting to reactivate and 
augment this disease might be a viable attack vector. Indeed, the use of probabilistic targeting might prove to 
be especially important for driving military outcomes in an age where public health measures in the military are 
virtually universal and can be readily distributed. Probabilistic targeting, combined with targeting via geographic 
distribution and timed introduction, might be amenable to a larger-scale attack on a region by a more ubiquitous 
pathogen that could be readily detected and shut down through conventional public health countermeasures. 

SUMMARY 


• Continued convergence may help overcome some barriers to usability as a weapon for synthetic 

• Commercial and other drivers will push developments in these convergent fields, and these advances 

(HHHHHHHHHHHHIHiiHHB 

• Medical applications are a key driver for a number of important converging technologies. 


While factors such as scale-up, stability, fidelity, and delivery are likely to continue to pose barriers to the 
weaponization of biological agents, a number of technological developments could create synergies with syn¬ 
thetic biology capabilities that allow malicious actors to overcome these barriers. In this chapter, five examples 
of convergent technologies at various stages of development (see Table 7-3) are presented that may help reduce 
barriers in various aspects of weaponization (see Table 7-1). It will be important to monitor future developments 
in these and other areas to identify and assess vulnerabilities that could facilitate bioweapons development. Such 
developments might result in significant raising of the level of concern related to the synthetic biology-enabled 
capabilities examined in this study (see Figure 9-1 and Table 9-1). 
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TABLE 7-3 Summary of Relative Maturity of Selected Convergent Technologies^ 

In Use by In Use by In Use by 

Developers Synthetic Molecular In Use by 

of the Biology Biology Amateur 

Technology In Development Technology Community Community Biologists 

Gene therapy 

Nanotechnology 

Automation 

Additive manufacturing 
Health informatics 

"For each column, darker shading indicates the technology is in routine use for that community, lighter shading indicates emerging use, and 
white background indicates little or no use. Adoption flows from left to right in most cases. 
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Options for Mitigating Concerns 


The study included consideration of opportunities to mitigate concerns related to the malicious use of bio¬ 
technology. The potential for mitigation was an integral part of the framework for assessing concern, as detailed 
in Chapter 3. As described in Chapters 4-6, considerations relevant to mitigation were included in the assessment 
of concern for specific potential capabilities, although these assessments did not include an in-depth analysis of 
current preparedness and response capabilities or speculate about the efficacy of various potential approaches. 
This chapter explores, from a broader perspective, some current mitigation approaches, how synthetic biology 
may challenge those approaches, and conversely, how synthetic biology may help address challenges or bolster 
mitigation approaches. A comprehensive, in-depth review of strengths and weaknesses in current U.S. or interna¬ 
tional programs was outside the scope of this study; as such, this report does not offer a full analysis of mitigation 
capabilities and makes no recommendations pertaining to mitigation priorities. Rather, this chapter is intended to 
provide useful context about fundamental mitigation concepts and approaches that arose during the course of the 
study, along with a brief exploration of some potential emerging challenges and opportunities. 

CURRENT MITIGATION APPROACHES AND INFRASTRUCTURE 

The mitigation of synthetic biology-enabled attacks essentially has two broad components: minimizing the 
chances of an attack and minimizing the negative outcomes once an attack has occurred. As discussed in Chapter 3, 
Potential for Mitigation, key elements that contribute to the potential for mitigation include deterrence and preven¬ 
tion capabilities, ability to recognize an attack, attribution capabilities, and consequence management capabilities. 
Broadly speaking, many of the same tools that are used to mitigate natural infectious disease outbreaks or exposure 
to chemicals (e.g., from environmental spills) are also relevant to mitigation of an intentional biological or chemical 
attack. In addition, the practices and rules in place to mitigate dual-use research may be relevant to some synthetic 
biology capabilities. The following sections provide a brief overview of selected existing mitigation approaches 
and infrastructures related to life sciences research, public health, emergency response, and healthcare capabilities 
that may be relevant to mitigating synthetic biology-enabled attacks. 


95 
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Deterrence and Prevention Capabilities 

Deterring or preventing the development and use of biological weapons, including those enabled by advances 
in synthetic biology, is of high priority for the U.S. Department of Defense (DoD) and for the nation. However, 
there are fundamental challenges to deterring or preventing misuse of biological advances. It has been noted that 
“the knowledge, materials, and technologies needed to make and use a biological weapon are readily accessible, 
everywhere in the world” (Gronvall, 2017). While fundamental research and clinical studies are the engines that 
drive public health and medical treatments, they simultaneously provide dual-use opportunities. Pathogens are 
ubiquitous, found in hospital and research laboratories, scientific culture collections, infected people and animals, 

be misused. 

To support deterrence and prevention of misuse of biotechnology without unnecessarily hindering beneficial 
research, the prevailing approach has been to implement multiple overlapping tools that, when taken together, can 
provide greater value. These tools fall into two general categories: norms, and policies and regulations. 


Norms and Self-Governance 

Norms against the misuse of biology exist and are supported on many levels, from the global to the individual. 
The Convention on the Prohibition of the Development, Production and Stockpiling of Bacteriological (Biological) 
and Toxin Weapons and on Their Destruction, commonly known as the Biological Weapons Convention (BWC), 
is the cornerstone of international-level deterrence for biological weapons, including those created by synthetic 
biology (UNOG, 2017). The BWC bans such weapons, sets the standard for global norms, binds the nation-states 
that are party to the treaty, and defines acceptable behavior. There have been violations; for example, the Soviet 
Union maintained a secret bio weapons program after the treaty was ratified (Alibek, 1998; Cox and Woolf, 2002). 
However, no country goes against the international norm to flaunt an offensive biological weapons program; even 
North Korea, which openly flouts international prohibitions against nuclear testing, has denied accusations that 
the country is developing biological weapons (Sampathkumar, 2017). United Nations Security Council Resolution 
1540, which prohibits states from assisting non-state actors in developing biological and other types of weapons, 
is another relevant international agreement (UN Security Council, 2004). 

At the level of institutions and individuals, the scientific community has a tradition of self-governance and 
established norms entailing what constitutes responsible conduct in science. A landmark example is the 1975 Asi- 
lomar conference. With the advent of recombinant DN A technology, leading scientists recommended a moratorium 
on recombinant DNA experiments involving toxins, oncogenic viruses, and antibiotic resistance until their safety 
could be assessed (Berg et al., 1974). To facilitate that assessment, scientists and government officials gathered 
at a conference in Asilomar, California; after further research and national discussion, the moratorium was lifted 
in 1976, and a new guidance system was created for all recombinant DNA work funded by the U.S. government. 
What happened at Asilomar has become the template for scientists’ responses to scientific discoveries with social 
and ethical implications and a symbol of the scientific community’s capacity to self-govern. 

In the decades since, this tradition of self-governance has been applied toward dual-use biotechnologies. In 
2004, a National Academies report, known as the “Fink report” after the study’s chairman, geneticist Gerald R. 
Fink (NRC, 2004), made the case that scientists have a moral duty to avoid contributing to the advancement of 
biowarfare or bioterrorism and outlined types of experiments that would require consideration and review before 
being undertaken. These experiments —including those relevant to rendering a vaccine ineffective or conferring 
resistance to available therapeutics, evading detection or diagnosis methods, enhancing or creating virulence, 
increasing a pathogen’s transmissibility or altering its host range, or enabling weaponization—parallel the concerns 
considered in this report regarding uses of synthetic biology. The Fink report formed the starting point for a federal 
advisory committee of the U.S. Department of Health and Human Services (HHS) called the National Science 
Advisory Board for Biosecurity, which defined Dual Use Research of Concern (DURC) (U.S. Government, 2012) 
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and established the basis for a requirement that U.S. federally funded research involving certain regulated Select 
Agent pathogens (taken from the Federal Select Agent Program Select Agents and Toxins list; see CDC/APHIS, 
2017) undergo DURC research review. 

Another important area of self-governance relevant to synthetic biology is the voluntary screening of orders 
by vendors providing DNA synthesis services. Guided by a framework created by HHS in 2010, DNA provid¬ 
ers are encouraged to screen orders for sequences of concern (e.g., DNA encoding Select Agents) and to screen 
customers to ensure that they are legitimate users of biology (HHS, 2010). Screening is intended to ensure that 
genetic material of regulated pathogens—including the causative agents of anthrax, smallpox, and rinderpest, for 
example—cannot be purchased without review and potentially consultation with government agencies. Screening 
is supported and facilitated by the International Gene Synthesis Consortium (IGSC), an international voluntary 
coalition of gene synthesis companies, which has adopted the 2010 HHS-recommended screening practices as 
well as even more stringent measures (IGSC, 2017; Cision PR Newswire, 2018). 

Other examples of self-governance include work related to the responsible conduct of scientists (e.g.. National 
Academies of Sciences, Engineering, and Medicine, 2017b,c), bioethics training for students, a life sciences pro¬ 
fessional code of conduct, and biosafety training for laboratory scientists. While the norms of self-governance 
are not going to deter or prevent a determined malicious actor from seeking to develop, obtain, or use a biologi¬ 
cal weapon (whether it is enabled by synthetic biology or not), these norms provide groundwork that could be 
built upon. At minimum, they offer a basis for social surveillance of unethical or malicious behavior within the 
scientific community. 


U.S. Policies and Regulations 

After the 2001 attack involving letters containing anthrax spores, the U.S. Congress strengthened several laws 
relevant to biosecurity and dual-use research, which resulted in the formal implementation of the Federal Select 
Agent Program (CDC/APHIS, 2017). In contrast to previous biosafety and containment guidance, which was 
geared toward equipping laboratory workers to perform experiments on dangerous pathogens without harming 
themselves or the public, the Select Agent program was designed to protect against unauthorized agent acquisition 
that might potentially result in the purposeful misuse of those specified agents and toxins deemed most harmful. 
The regulations require facilities handling listed pathogens to have physical security protections in place and to 
require individuals to undergo a security assessment before accessing agents on the list. For the most part. Select 
Agent regulations provide security through denial of access to pathogens, under the assumption that most bad 
actors would prefer the simplest method of gaining access to pathogens — stealing them from a laboratory. 

Additional policies and requirements apply to researchers who receive U.S. federal funding for DURC, and 
these were recently reviewed by the National Academies (see National Academies of Sciences, Engineering, and 
Medicine, 2017b). These requirements (U.S. Government, 2012, 2014) stipulate that research using one of 15 
pathogens or toxins or that falls within seven identified experimental categories is subject to additional oversight. 
Research proposals involving highly pathogenic avian influenza H5N1 also are subject to special evaluation by 
HHS. Although the government recently lifted a moratorium on gain-of-function experiments involving “pathogens 
of pandemic potential,” it specified additional review procedures that must be carried out before such experiments 
can be conducted (HHS, 2017a). 

Some aspects of deterrence and prevention are based in the public health arena. For example, the availabil¬ 
ity and use of a vaccine or other countermeasure for a particular biological threat, in itself, can be a powerful 
deterrent—a bad actor is much less likely to use an agent for which the target population is impervious. Even in 
the absence of a specific medical countermeasure, a robust and healthy population, supported by strong public 
health infrastructure, can provide resilience against an attack. Conversely, the Ebola outbreak in Guinea, Sierra 
Leone, and Liberia that killed 11,310 people in 2014-2015 and impacted other countries including the United 
States is an example of what can happen during a natural outbreak of a serious infectious disease in the absence 
of a robust public health infrastructure. Kosal (2014) and others have reinforced the importance of strengthening 
public health infrastructure in all areas of the world as a strong deterrent to misuse of biotechnologies and as a 
way of enhancing international biosecurity. 
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Capability to Recognize and Attribute an Attack 

Other factors that contribute to mitigation relate to the capability to detect an emerging health threat, recognize 
it as a purposeful attack, and trace the attack to the actor responsible. Epidemiology, laboratory diagnostics, and 
environmental monitoring are essential components of systems to detect emerging health threats. Some of the 
procedures involved in disease surveillance and agent identification can also inform a determination of whether 
a health threat is the result of an intentional attack or a natural outbreak and potentially provide clues about the 
actor responsible. Figure 8-1 provides an overview of selected existing procedures and systems in place to identify 
emerging health threats affecting the U.S. public and military personnel. 

In the United States, surveillance and reporting of infectious diseases occur at multiple levels and have both 
mandatory and voluntary components. Depending on local, state, or territorial jurisdictional requirements, health¬ 
care providers, laboratories, hospitals, and other healthcare partners in the civilian arena must report the detection 
or suspicion of certain agents to their regional public health department and sometimes must submit samples for 
confirmatory testing at a public health laboratory. Once such a laboratory is involved, an alert is issued to support 
the identification of other cases of similar disease, and epidemiology becomes an essential factor in disease sur¬ 
veillance. In addition, the identification of certain pathogens (e.g.. Select Agents) at these regional public health 
nodes requires notification of the U.S. Centers for Disease Control and Prevention (CDC) through the Laboratory 
Response Networks for Chemical and Biological Terrorism (CDC, 2014b,c). The DoD has a similar nodal system 
of large military reference laboratories, smaller regional laboratories, and local and point-of-contact care centers, 
referred to as a “soldier-provider-biosurveillance sentinel” approach. The DoD also operates a Global Emerging 
Infections Surveillance and Response system to monitor emerging infectious diseases (AFHSB, 2017), and DoD 
laboratories also participate in CDC’s Laboratory Response Networks. 

To identify a pathogen, a specimen is typically compared against data available from organism banks or 
sequence databases, such as the Multidrug-Resistant Organism Repository and Surveillance Network (WRAIR, 
2017), CDC’s MicrobeNet (CDC, 2017b), or GenBank® (NCBI, 2017). Direct antigen tests, supported by both 
military and civilian healthcare systems, use immunochromatographic methods to identify pathogens and can be 
conducted in the field or in any physician’s office. Increasingly, these tests are being replaced by newer platforms 
for point-of-care molecular tests, most based on polymerase chain reaction (PCR) technologies, which can rapidly 
detect bacteria, viruses, and parasites, and require little technical knowledge or sample handling (de Paz et al., 
2014; Vidic et al., 2017). While they only target specific known and relatively common pathogens, molecular 
technologies can quickly rule in or rule out a known pathogen and provide more accurate and sensitive results than 
direct antigen tests. When tests available at the point of care are inconclusive or confirmatory testing is desired, 
specimens can be sent to public health, military, or commercial reference laboratories, which have a much more 
extensive capability based on in-house laboratory-developed tests. These tests, most based on real-time PCR or 
matrix-assisted laser desorption/ionization time-of-flight (MALDI-ToF) mass spectroscopy, require laboratory 
infrastructure and are more complex to perform and analyze, but they are capable of detecting a wider range of 
pathogens. The molecular identification methods used in the Laboratory Response Network laboratories and thus 
in the disease surveillance and reporting systems with which they interface are developed nationally and deployed 
via standardized methods to provide uniformity and comparability of results across each network. These efforts 
are also supported by extensive National Institute of Allergy and Infectious Diseases research and development 
efforts to advance methods for tracking, sequencing, and analyzing pathogens. 

These surveillance systems support early detection and response when an emerging disease threat presents 
symptoms that are clearly apparent and can be linked to an identifiable pathogen or toxin. Surveillance networks 
in countries that have a robust public health system are also a valuable asset toward recognition of an attack, 
should one occur (see Kosal, 2014). However, such an attack would likely take longer to detect in less-developed 
countries or in war zones, which generally lack a strong public health infrastructure or for an agent that produces 
atypical symptoms. Another limitation is the temporal reporting delay between local and national recognition that 
an outbreak or attack has occurred. 

To augment established surveillance and notification systems, public health authorities are exploring the use 
of a variety of newer networks and potential data sources. For example, the e-mail listserv ProMED-mail acted 


Copyright National Academy of Sciences. All rights reserved. 


Biodefense in the Age of Synthetic Biology 


OPTIONS FOR MITIGATING CONCERNS 


99 


Disease/Agent Detection 


Agent Identification 

• Disease detected at point of care (e.g.. 

specimens 

• Initial testing in field or doctor's office 

doctor's office, emergency department, 


• Antigen detection tests 

field hospital) 


• Molecular tests 

• Agent detected via environmental 


• Extensive testing in specialized labs 

monitoring (e.g., BioWatch 1 , FERN 2 ) 


• State or federal public health labs 

• Military reference labs 

• Commercial labs 
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Reporting and Information Exchange 

• CDC Epidemic Information Exchange 3 (Epi-X) communications network 

• National Notifiable Diseases Surveillance System, NNDSS 4 (civilian) 

• Global Emerging Infections Surveillance and Response System, GEIS 5 (military) 

• CDC Laboratory Response Networks for Chemical and Biological Terrorism, 
LRN-C 6 and LRN-B 7 (both civilian and military) 

• Disease-specific surveillance programs (e.g., influenza 8 , food borne diseases 9 ) 

• International networks (e.g., ProMed 10 ) 


FIGURE 8-1 Examples of elements that contribute to the identification of emerging health threats. When a disease is detected 
via the healthcare system, initial tests in the field or doctor’s office are performed to identify the causative agent. If initial 
tests are inconclusive, more extensive testing may be carried out in specialized laboratories. If the results meet certain criteria, 
reporting to one or more surveillance and response networks may be required. These networks in turn adjust testing protocols, 
reporting requirements, and response guidelines according to current understanding of threats. In general, these steps are car¬ 
ried out under the purview of separate systems in the civilian versus military realm, though there are cross-linkages. There are 
also systems designed to detect agents directly in the environment in order to provide early warning before affected patients 
enter the healthcare system. 

NOTES: 1 BioWatch is a program of the U.S. Department of Homeland Security that monitors the air in public places for the 
presence of Select Agents (Firoved, 2016). 

2 The U.S. Department of Agriculture’s Food Emergency Response Network (FERN) is responsible for detecting biological, 
chemical, and radiological contamination of food (FERN, 2017). 

3 CDC, 2017a. 

4 National Notifiable Diseases Surveillance System, https://wwwn.cdc.gov/nndss.Accessed May 11,2017. 

5 AFHSB,2017. 

6 CDC, 2014c. 

7 CDC, 2014b. 

8 CDC, 2017c. 

9 CDC, 2017e. 

10 The Program for Monitoring Emerging Diseases is a reporting system maintained by the International Society for Infec¬ 
tious Diseases, http://www.isid.org/promedmail/promedmail.shtml. Accessed January 25, 2018. 

as an early warning system during the SARS (severe acute respiratory syndrome) outbreak in China in 2003 
(Madoff, 2004); social media has been used to supplement traditional infectious disease surveillance tools (e.g., 
see Milinovich et al., 2014; Velasco et ah, 2014; Charles-Smith et ah, 2015; Young, 2015; Fung et ah, 2016); and 
new data sources such as electronic medical records, search engine queries, data on pharmaceutical purchases, or 
longitudinal seroprevalence or biomonitoring studies (Klompas et ah, 2012; Butler, 2013; Fung et ah, 2015) could 
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potentially be mined for real-time disease surveillance purposes. Although these newer platforms are not validated 
data sources in surveillance and epidemiology—still requiring standards, advanced analytical capabilities, and 
resolution of privacy concerns (Chiolero et al., 2013; Friedman et al., 2013) —they could be valuable tools for 
earlier detection of natural or intentional disease events in the future. 

Consequence Management Capabilities 

Two key capabilities for containing and responding to a chemical or biological attack (consequence manage¬ 
ment) are the ability to limit the spread of transmissible agents and the ability to counter an agent with vaccines, 
therapeutics, or other tools. 


CDC provides clear definitions of classic infectious disease mitigation measures such as the isolation of 
infected individuals (CDC, 2014a). Isolation and quarantine, along with contact tracing and travel restrictions, were 

ness of such public health measures is highly dependent on the basic reproduction number, known as R 0 , and the 
serial interval of the pathogen in question. In addition, while such measures tend to work well in a military setting, 
they can be more difficult to implement in a civilian setting due to poor acceptability and other social factors, as 
was the case in the United States during the 2015 Ebola outbreak. Other relevant measures to limit the spread 
of agents include personal protective equipment such as impermeable body suits, gloves, and respirators used to 
protect emergency workers from contamination when working in the field (FDA, 2017c). 


Medical Countermeasures 

Medical countermeasures include biological products, drugs, and devices approved by the U.S. Food and Drug 
Administration (FDA) to prevent, treat, or ameliorate illness in the event of a public health emergency caused 
by an infectious agent, toxin, or chemical, whether natural or manmade. These include devices such as personal 
protective equipment, along with vaccines, antibiotics, antivirals, antitoxins, and other drugs and therapeutics. 1 

HHS and the DoD share responsibilities for the development of medical countermeasures, targeted at agents 
on the Select Agent list, in conjunction with Material Threat Assessments provided by the U.S. Department of 
Homeland Security (see the Public Health Emergency Medical Countermeasures Enterprise Strategy and Imple¬ 
mentation Plans [HHS, 2017b]). Limitations in research capacity, funding, and clinical capabilities necessitate 
careful decisions about which medical countermeasures can be feasibly developed, from their inception to animal 
testing, scale-up, clinical testing, and manufacturing. It is also difficult to engage pharmaceutical manufacturers 
to invest time and platforms into medicines that may not show significant return on investment. Considerations 
related to how these measures are manufactured (typically on an on-demand basis) and dispensed to populations 
are also important. Although some countermeasures are placed in the Strategic National Stockpile (maintained 
by CDC), which supplies state and local public health agencies with medical countermeasures in the event of a 
national emergency (CDC, 2017f), inventories of many countermeasures are extremely limited and are likely to 
be sufficient for only the first days of an outbreak situation. 

MITIGATION CHALLENGES POSED BY SYNTHETIC BIOLOGY 

The mitigation measures described above have strengths and weaknesses despite the advent of synthetic biol¬ 
ogy. Synthetic biology brings some of those weaknesses into sharper relief, creates new challenges, and creates 
opportunities for improving mitigation capabilities. 


1 For further information on public health medical countermeasures, see FDA, 2017c. 
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Challenges to Deterrence and Prevention 

Taken together, strategies such as norms and self-governance, voluntary guidance, regulations, and interna¬ 
tional bans provide numerous barriers to the misuse of biological research that are potentially larger than the sum 
of their individual parts. However, these strategies, many of which lack formal enforcement mechanisms, have 
been criticized over the years as insufficient to guard against the purposeful misuse of biology (Palmer et al., 
2015). At the international level, for example, the BWC has influenced norms but has few effective enforcement 
mechanisms. Concerns about the weaknesses of these strategies have gained greater traction with the emergence 
of synthetic biology. The following sections discuss two areas in which synthetic biology has raised particular 
concern: the accessibility of modern biotechnology to a wider range of actors and the pitfalls of list-based screen¬ 
ing to detect malicious activity. 


Accessibility of Biotechnp logy 

Biology today is conducted in a markedly different environment than that of the 1975 Asilomar conference, 
the seminal event that set the model for scientific self-governance. There is now not only an expanded array of 
tools available, but a far more diverse scientific community. Synthetic biology techniques are accessible to a wide 
variety of people, including traditional academic and commercial researchers but also amateur biologists, nonbi¬ 
ologist engineers, and manufacturers, not all of whom are steeped in the norms of traditional academic settings. 
Some have also argued that tacit knowledge is becoming less central to successful biological manipulation thanks 
to the increasing sophistication of information technologies (Revill and Jefferson, 2014). As noted in Chapter 2, 
the movement toward making biology “programmable” broadens the array of actors who may be capable of 
engineering biological components, although the pace and ultimate degree to which biology is and will become 
“programmable” is a matter of some debate. 

In addition to traditional pathways for entering biotechnology—working in academic laboratories, obtaining a 
graduate degree, and pursuing a traditional postdoctoral fellowship—people can now enter the field through non- 
traditional ways. For example, do-it-yourself (DIY) models of biological experimentation have gained popularity 
in recent years, offering nonscientists the tools and guidance for performing biological research. As biotechnology 

could, with a few thousand dollars of investment, get to work “hacking biology” (Carlson, 2005). The community 
has grown since then; in 2017, a “Global Community BioSummit” was organized at the Massachusetts Institute of 
Technology (MIT) Media Lab, which brought together “biohackers” and members of independent and community 
laboratories from dozens of countries (MIT Media Lab, 2017). Many DIY biology activities are expressly edu¬ 
cational, fun, or tied to local community needs (e.g., testing food samples). Yet while most of these DIY projects 
are not sophisticated, the model does make accessible to the general public tools that can be used to do advanced 
work. For example, for less than $200, reagents and kits can be acquired that enable amateurs to employ gene- 

likely be required to use such kits to create a harmful agent. It is also possible that community laboratories could 
provide a venue for malicious actors or be implicated as misdirection in a perpetrated event. 

Another example of a nontraditional group of biotechnologists is the International Genetically Engineered 
Machine competition (iGEM, 2017b). iGEM began in 2003 as an in-class competition at MIT in which teams of 
students were challenged to build synthetic biological systems from standard, interchangeable parts, called Bio- 
Bricks™,and operate them in living cells. Though iGEM projects are carried out by students, many of them entirely 
new to bioscience, some projects have been quite sophisticated. Now an annual event open to participants outside 
of MIT, iGEM involves students at the high school, undergraduate, and graduate levels from countries around the 
globe. Projects routinely involve the engineering of microbial, mammalian, and plant cells; the 2014 grand prize 
winner, for example, circularized proteins to make them more physically stable. 

Holloway, 2013; Kolodziejczyk, 2017). A “see something, say something” campaign of the Federal Bureau of 
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Investigation (FBI) performs outreach to both the DIY biology community and to iGEM (Wolinsky, 2016). The 
FBI and the American Association for the Advancement of Science have also teamed up to increase understanding 
of the risks and benefits of the field (Lempinen, 2011) and explore ways to “safeguard science.” 


Pitfalls of List-Based Screening 

Advances in synthetic biology capabilities pose a number of challenges to list-based screening as a key tool for 
deterrence and prevention. In particular, the voluntary screening of orders by DNA providers, a system intended to 
prevent production of Select Agents, is becoming less useful (Casadevall and Reiman, 2010; Carter and Friedman, 
2015; DiEuliis et al., 2017b). While screening of customers is and will likely remain an important tool, recent 
research examples indicate that screening of the sequences ordered by those customers may become less relevant. 
Using lists may make it easier to implement policy, but a static list-based approach is concerning not only because 
many pathogens exist in nature, but because synthetic biology now allows for the creation of new pathogens and 
other potentially harmful biological components that are not found on such lists. 

Sequence screening is based on homology to “data from all organisms on the Select Agent list, the Australia 
Group List, and other national lists of regulated pathogens” (IGSC, 2017), so if an agent is not on the list, it is not 
flagged. For example, current guidance did not prohibit a DNA provider from fulfilling an order for the genome 
of the extinct virus horsepox; the recent publication of the synthesis and booting of the horsepox genome (Noyce 
et al., 2018) raised concerns that some techniques employed to create this pox virus could be applicable to creat¬ 
ing smallpox (DiEuliis et al., 2017a; Koblentz, 2017) because horsepox has high sequence similarity to variola 
virus, the causative agent for smallpox (Tulman et al., 2006). In addition, while there are processes to connect 
synthesis companies with U.S. law enforcement agencies in the event of a problem, DNA synthesis is performed 
worldwide, and it is less clear that such processes are in place in all other nations. Importantly, in addition to DNA 
synthesis screening, lists such as the Select Agent list also form the basis of many of the downstream mitigation 
tools discussed in this chapter, including detection, diagnostics, and the development and prioritization of medical 
countermeasures. An overreliance on the Select Agent list is a systemic weakness affecting many aspects of the 
United States’ current biodefense mitigation capability. 

Another weakness is that DNA sequences of less than 200 base pairs (known as oligonucleotides) are not 
screened. This has raised concerns that a determined malicious actor could potentially obtain multiple short 
sequences from commercial vendors and assemble them to create full-length pathogen DNA, although such a 
strategy would require significant effort and skill, particularly for pathogens with large genomes. It has been argued 
that screening oligonucleotide orders is unworkable due to a higher expected false positive rate for any given 
short sequence, which would be exacerbated by the much higher volume of oligonucleotide orders (Garfinkel et 
al., 2007; Carter and Friedman, 2015). A counterargument has been put forth that oligonucleotide screening could 
be performed differently than for longer genes, such as by analyzing groups of oligonucleotides in an order (or 
across multiple orders) and setting sequence similarity thresholds to higher values. Another concern is that evolv¬ 
ing trends in the life sciences enterprise may erode vendors’ incentives for screening. As DNA synthesis becomes 
cheaper, the somewhat fixed cost associated with screening represents an increasingly larger percentage of total 
costs, creating a disincentive against screening on the part of those companies (DiEuliis et al., 2017b). These costs 
could be especially acute if oligonucleotide screening were implemented. 

Current screening approaches are primarily based on the homology of a sequence order to the sequence of a 
specified pathogen, as opposed to screening for sequences that confer specific pathogen characteristics. As further 
understanding is gained connecting sequence to function, there is an opportunity for the types of lists used to evolve. 
Thus, some form of list-based mitigation could continue to play a role in the deterrence and prevention toolkit, 
even if this strategy has limitations and will need to be part of a layered approach that includes other strategies 
(see Opportunities for Improving Deterrence and Prevention Capabilities, below). 


Copyright National Academy of Sciences. All rights reserved. 


Biodefense in the Age of Synthetic Biology 


OPTIONS FOR MITIGATING CONCERNS 


103 


Challenges to Recognizing and Attributing an Attack 

In a textbook world, approaches to surveillance for disease outbreaks are based on the appearance of clear 
disease symptoms in a group of individuals connected in place and time and which can be attributed to a causative 
agent. The recent Zika outbreak in the Americas is a good example of how these “perfect conditions” are not 
always met. Eighty percent of Zika-infected individuals showed no signs of disease, symptoms were mild even 
in those who were symptomatic, and the link to microcephaly in infants born to infected women could not have 
been predicted. Such examples underscore remaining weaknesses in disease surveillance tools for recognizing even 
natural disease outbreaks; these weaknesses may create particular challenges with regard to some types of synthetic 
biology-enabled attacks. For example, as discussed in Chapter 6, it may be possible to develop bioweapons that 
alter the human host and produce health effects that are not immediately obvious as a disease outbreak or attack, 
such as by reducing immunity or modifying the microbiome. 

Synthetic biology could also confound the ability to identify the causative agent in a biological attack. Despite 
the breadth and depth of available repository resources, there would not always be a reference specimen to use 
as comparator, particularly if the agent is markedly different from natural pathogens or toxins. Many current 
mitigation efforts are inherently list based (aimed at detecting Select Agents) and are heavily dependent upon the 
secrecy of the exact genomic regions used for the PCR primers and probes; should an adversary determine what 
these regions are, it could be possible to create a functional yet undetectable pathogen by altering those regions 
using codon-switching techniques. 

In addition to challenges related to clinical surveillance, synthetic biology could also further compound weak¬ 
nesses in environmental surveillance capabilities, which seek to detect agents in the environment to provide early 
warning before patients present in the healthcare system. For chemical threats, the Faboratory Response Network 
for Chemical Terrorism utilizes several forms of mass spectroscopy, which makes unbiased detection much 
more feasible (assuming reference standards are available) than in the biological field, where unbiased detection 
remains extremely challenging. Although it is feasible to utilize PCR to identify a Select Agent pathogen “needle” 
from the enormous environmental background “haystack,” there is no technology available today that can reli¬ 
ably alert us when a novel pathogen, whether natural or engineered, is present in the environmental background. 
These tools will not be useful in detecting unknowns, genetically engineered chimeras, or agents for which the 
PCR primer or probe binding site has been altered. Ultra-deep metagenomic sequencing will find vast amounts of 
uncharacterized sequence in any environmental sample, and sorting it all out to the point where a novel pathogen 
can be definitively identified is currently too costly and too lengthy a process to be useful. Bioinformatics tools 
provide powerful means of sifting through seas of sequences, but they rely on assumptions, for example, about 
what constitutes a taxonomic unit, and the incompleteness of available reference databases affects the accuracy 
of the results. An additional complication is that the “normal” background microbial composition is poorly char¬ 
acterized for many outdoor and indoor environments and can be affected by many factors (National Academies 
of Sciences, Engineering, and Medicine, 2017d). Given these challenges, approaches such as metagenomics and 
environmental surveillance are not likely to completely fulfill the need to provide early identification of agents 
used in synthetic biology-enabled attacks. 

If current environmental surveillance methods are not capable of recognizing a novel agent, the implication 
is that we are dependent upon the public health system to recognize outbreaks of novel pathogens, whether natu¬ 
ral or engineered. Relying on this reactive approach suggests that it would not be possible to act to mitigate or 
contain an outbreak until patients have developed symptoms that trigger a health community response; as a result 
of this delay, people would become ill before it is possible to know that an attack has occurred. Isolation of the 
novel causative agent by culturing (if possible) followed by sequencing or ultra-deep sequencing and painstak¬ 
ing assembly would be needed to characterize the agent and lay the groundwork for analyzing its mechanisms 
and origin. This initial characterization process might take a few days at best, or considerably longer if the novel 
agent is a highly engineered version of a normally benign microbe or is no longer present in the patient by the 
time symptoms are apparent. In cases in which the agent is a pathogen, PCR reagents can be developed quickly 
once the genome has been obtained, at which point the agent can be added to the list of agents detectable through 
environmental and clinical surveillance systems. 
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There is no magic bullet for dealing with all new routes to harm that are made possible by modern biotech¬ 
nology, including synthetic biology, nor are there magic bullets for handling every natural agent that emerges, as 
exemplified by experiences with SARS, MERS (Middle East respiratory syndrome). West African Ebola, and other 
outbreaks. The 2003 SARS outbreak in particular underscored to the international public health and biosurveil¬ 
lance communities the need to have mechanisms in place for rapid characterization and international information 
sharing to respond adequately to novel and emerging threats. The types of biosecurity concerns related to synthetic 
biology assessed in this report provide added urgency to that message. 

Consequence Management Challenges 

If disease surveillance and laboratory infrastructure cannot detect, identify, and characterize the causative 
agent, it is also possible that current available medical countermeasures —such as vaccines and therapeutics—may 
be less effective or, in certain cases, ineffective. While existing medical countermeasures may be quite useful for 
containing or counteracting agents created with synthetic biology that are highly similar to existing pathogens 
of concern, not all agents may fit this model. For example, if multiple drug resistance mutations are introduced 
into a bacterium to produce a bioweapon, even a broad-spectrum antibiotic administered before the agent is fully 
characterized may be ineffective. Similarly, if a viral chimera is engineered bearing novel surface antigens, it 
is unlikely to be neutralized by immunoglobulin given post-exposure. In short, if the agent is not susceptible to 
available vaccines, drugs, or antibody-based therapeutics, existing systems are less likely to limit its spread, poten¬ 
tially increasing the scope of casualties. In such scenarios, developing, testing, and approving drugs and vaccines 
to counter the agent using traditional approaches would entail long delays and an associated likelihood of many 
people being affected, suggesting a need for novel approaches to rapidly manufacture and test new therapeutics. 
Effectively implementing such approaches would require not only technological advancement but also rapid regu¬ 
latory approval processes, such as the Emergency Use Agreement mechanism used by the FDA. 

POTENTIAL OPPORTUNITIES TO ADVANCE MITIGATION CAPABILITIES 

Despite the challenges posed by the current and anticipated biological threat landscape, there are multiple 
opportunities to build upon current capabilities and fill some of the gaps. In fact, synthetic biology capabilities may 
themselves help advance some mitigation efforts. Providing a comprehensive list of technologies with sufficient 
information to judge their efficacy in dealing with novel outbreaks is outside the scope of this report. This section 
is intended to highlight some of the ways in which technologies currently in development could improve the abil¬ 
ity to handle future outbreaks or attacks, including selected examples of potential opportunities for improving the 
capacity for deterrence, prevention, attack recognition, attribution, and consequence management. 

Opportunities for Improving Deterrence and Prevention Capabilities 

Engineering techniques such as abstraction, standardization, modularity, automation, and rational design are 
likely to enable significant advances in synthetic biology. While the degree of incorporation of computation into 
the synthetic biology workflow will vary, one opportunity to explore mitigating biodefense concerns, for those 
approaches that depend on computational engineering, is to explicitly integrate mechanisms to prevent, detect, 
identify, and store information about malicious activities in the computational infrastructure. This approach could 
be relevant to all aspects of mitigation but is perhaps most salient for prevention and attribution. Examples of types 
of approaches that could be further explored are discussed below. Box 8-1 outlines how such approaches might be 
applied to identify or prevent malicious activity at various stages of two example scenarios. 

• Screening of activities with machine learning: It may be possible to develop algorithms that learn and 
recognize patterns, such as DNA segments or sequence transformations, material transfers, or equipment 
usage, that relate to the creation of a biological threat. This approach could potentially help flag suspicious 
activity early in the design cycle. However, developing such algorithms requires a large amount of training 
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data, and data reflecting malicious activity would be hard to come by; as a result, developing a sufficiently 
accurate algorithm may be infeasible. 

• Systems to constrain design capabilities: Rules could potentially be encoded directly in software for 
engineering DNA constructs to make it difficult or impossible to create specific genetic designs, for 
example, by prohibiting or requiring the addition or removal of specific DNA segments, requiring specific 
assays, preventing the transfer of materials to specific individuals or entities, or excluding or requiring the 
use of specific host organisms. Although this approach could help deter or prevent some malicious activities, 
it would not be sufficient to prevent designs based on specific knowledge or on brute-force combinatorial 
testing that bypasses biological design tools and could be difficult to implement in a way that prevents user 
tampering. 

• Maintaining registries of known expertise and materials: Database infrastructure and supporting tools 
could be created to track known sources of expertise and materials relevant to the capacity to produce a 
biological threat, such as information about laboratories, personnel, and sources of material. In addition 
to identifying relevant players, it could be possible to profile designs coming from them to create known 
“digital signatures” of the engineering designs of individuals or groups. However, obtaining access to 
sufficient designs to be able to profile malicious users would be difficult, as distinguishing legitimate 
activities would be. 

• Maintaining registries of known biological threats: Despite the inherent limitations of list-based systems in 
light of synthetic biology capabilities, there may nonetheless be opportunities to enhance the utility of these 
systems by systematically connecting them to design software and to automated foundries. Furthermore, 
there is an opportunity for screening procedures to move from a focus on organisms to a focus on DNA 
functions. It has been argued that emphasizing known pathogenic functions (as opposed to whole genomes 
of Select Agents; see IARPA, 2017b) would allow the curation of a more meaningful registry, one drawn 
directly from the DNA components responsible for causing harm. For example, software used for synthetic 
biology could be required to periodically run “checks” against bioagent registries or to automatically add 
new biological threats to these registries when they are identified. For such an effort to succeed, it would 
need to be scalable, searchable, and resistant to hacking. Malicious users would presumably be constrained 
to other approaches that do not rely on design software, such as experimental approaches like DNA shuffling 
or mutagenesis. 

• Tracking digital “signatures” in genetic designs: It may be possible to deploy information technology at 
key stages in the automation pipeline to identify the source and the creator of synthetic genetic material 
to ensure that it comes from trusted sources. Were an attack to occur, this information could also help to 
identify the actor responsible. However, this approach would largely be applicable to strategies employing 
genetic circuit design tools; attribution of synthetic materials created by other means, such as through 
directed evolution, would be much more difficult. Watermarks for this purpose could be “biological,” for 
example, if the genetic material (e.g., the DNA sequence) has additional information inserted that uniquely 
identifies the sample (Heider and Barnekow, 2008), or the watermarks could be “electronic,” for example, 
if the information is added digitally to the electronic file used to communicate the biological information 
(e.g., in the binary information that encodes a GenBank® file) (Cox et al., 2008). Electronic watermarks are 
more mature and more likely to be more useful in practice where the biological material is manipulated. 

Opportunities for Improving Agent Identification and Attribution Capabilities 

Because so much of the natural nucleic acid space has yet to be sequenced and characterized, it remains 
extremely difficult to determine if a given genetic sequence is of natural or nonnatural origin. However, current 
analysis methods can help identify situations in which gene sequences appear in unexpected places (e.g., identifying 
that the toxin gene from Clostridium botulinum has been inserted into the genome of Escherichia coli). In addition, 
the products of genetic circuit engineering (see Chapter 4, Figure 4-3) can clearly be recognized as nonnatural and 
even contain design patterns that may provide attribution clues. Additional tools that enable one to detect that a 
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BOX 8-1 

Workflow Examples to Illustrate Mitigation Opportunities 

The following tables highlight examples of how computational approaches to support mitigation might 
apply to various activities that an actor would perform in pursuing two types of biological threats. These 
breakdowns are not meant to be exhaustive but rather are presented to illustrate challenges and opportuni¬ 
ties. Not all options would apply to all situations, and implementing these options also would likely engender 
debates over trade-offs regarding issues such as who would get access to tools, materials, and information; 
how to balance security with a desire to avoid curtailing legitimate research; or societal concerns about 
privacy and surveillance. Although a full assessment of the opportunity provided by computational biology 
was outside the committee’s scope, shading provides a sense of which activities are considered to present 
a low (light blue) or medium (darker blue) level of opportunity. 


Re-creating a Known Pathogenic Virus 


Activity 

Potential Computational Approaches to Support 
Mitigation 

Early planning 

Accessing literature and protocols relevant to DNA 
construction, working with a given virus This type 
of activity is likely to be difficult to distinguish from 
nonmalicious activity, and attempts to do so would yield 
many false positives. Implementing mitigation efforts 
targeted at this step will likely be difficult and likely 
increase barriers to legitimate activities. 

Sequence selection 

Accessing databases of viral genome 
sequences 

Although database access can be monitored, 
regulating this process would likely be difficult and 
could hinder legitimate research. Additionally, any 
genome sequences removed from databases would 
likely be available from other sources. 

Sourcing materials 

Ordering reagents and equipment, such as 
genetic material, DNA synthesis equipment, 
and cell lines or animals 

Material transfer agreements already provide security 
mechanisms for the legitimate transfer of materials. 

Illicit transfers would be difficult to prevent and ordering 
of basic molecular biology reagents and equipment is 
likely to be too prevalent to monitor. 

Design software 

Software for DNA sequence management, 
biological manipulation or design, or 
visualization 

Because computation is explicitly involved in this step, 
the addition of electronic tracking and annotation of the 
design files can help indicate design origin, destination, 
and the history of modifications. Electronic 
watermarking is likely to be more acceptable than 
biological watermarking. 


sequence had been genetically manipulated, or tools to analyze features of a sequence or a resulting organism that 
contribute to actor attribution, would be valuable additions to mitigation strategies. 

Although many U.S. government agencies have expertise and responsibilities relevant to preparing for, 
preventing, and responding to an attack involving engineered biological components, no single agency has lead 
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Data management 

Records such as electronic laboratory notebooks can 

Software used to keep track of the project 
and the personnel involved 

provide information about the history of a design and 
those involved in its development; however, malicious 
users could modify their identity and activities to make 
this data source less reliable. 

General computing 

Computing that is part of common equipment 
used for the project, including gel docs, 
thermocyclers, and incubators 

These computing platforms are likely too general 
purpose to be of much targeted use. 


Design of a Metabolic Pathway for In Situ Synthesis of a Toxin via the Gut Microbiome 


Activity 

Potential Computational Approaches to Support 


Mitigation 

Host selection 

Choose the chassis/host organism. 

The selection of an organism is likely to be too early 
in the process to determine if malicious activity is 
intended. Biosafety-level restricted organisms would 
raise a flag, but the process of obtaining these 
organisms is already regulated. 

Gene selection 

Identify the genes required to create the 
needed enzymes. 

It would be possible to flag the selection of certain 
genes, such as those associated with a prohibited 
toxin. In general, however, gene selection is likely 
too common a process to reliably detect or prevent 
malicious activity without unduly curtailing legitimate 
research. 

Design software 

Construct genetic designs with genes 

Screening 

Screen for enzyme activity. 

Electronic watermarking can be used during the 
design process of interest. 

The identification of broad enzyme categories is not 
likely to detect threats reliably. 

Tuning 

Engineer proteins to modify enzyme activity 
if needed. 

Specifically targeting enzymes for modification may 
create patterns that can be detected and learned from. 

Tuning 

Swap in regulatory biological components to 
fine-tune enzyme activity. 

The changing of parts is a directed process whereby 
the resultant activity changes produce a record that 
can potentially infer desired results. 


responsibility in this area. The 2001 Amerithrax letter attacks first brought focus on bioterrorism and the need for 
the federal government to build standardized software tools and laboratory methods to analyze engineered organ¬ 
isms. Several recent examples are summarized briefly below. 
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• Safe Genes (DARPA, 2017), a program of the Defense Advanced Research Projects Agency, focuses on 
developing strategies to better control genome editing activity, such as by inhibiting genome editing in 
cells or preventing off-target editing activity. 

• Functional Genomic and Computational Analysis of Threats (Fun GCAT; IARPA, 2017b), a program of 
the Intelligence Advanced Research Projects Agency (IARPA), aims to facilitate the design of better tools 
for screening DNA synthesis orders. 

• Finding Engineering-Linked Indicators (FELIX; IARPA, 2017a), another IARPA program, seeks to develop 
a suite of tools designed to distinguish natural organisms from animals, bacteria, insects, plants, and viruses 
that have been engineered to potentially cause harm. 

• To help reduce risk, the U .S. Department of Homeland Security sponsors the Sequences of Interest database 
to bring together in a single source nucleic acid and protein data about genetic mechanisms of virulence and 
resistance, along with protein toxin data and nucleotide data about plasmids and artificial vectors that may 
signify natural or artificial bacterial genetic change (D. Shepherd, Chemical-Biological Defense Division, 
Department of Homeland Security, personal communication, 2018). 

While these or other programs were not evaluated as part of this study, they represent examples of the kinds 
of investments that would increase preparedness for the types of synthetic biology-enabled capabilities discussed 
in this report. 

As discussed in Chapters 4-6, synthetic biology techniques can be used to modify pathogens, hosts, and vector 
species; these agents could possibly be used in complex attacks involving multiple pathogens, hosts, or vectors. 
Under the public health paradigm, identifying an agent’s species and any antimicrobial resistance factors is gen¬ 
erally sufficient to guide treatment, for example, with a particular antibiotic. However, that level of information 
may not be sufficient for forensics and attribution, particularly if a deliberate attack or engineering is suspected. 
In these cases, responsible federal agencies will want to know how similar the new sample is to strains in the 
sequence databases, whether it is a common laboratory strain or a strain from a different part of the world, how 
the new sample compares to strains found at suspected facilities, and the degree of certainty with which we can 
determine whether the agent is a natural strain or might have been raised in a particular type of culture media, for 
example. Except in cases in which leftover samples are found in the laboratory where the material was created, 
proving attribution in the era of synthetic biology appears to be growing increasingly difficult, particularly for 
complex attacks that could potentially take considerable time to achieve their intended effects. As a result, attri¬ 
bution in the age of synthetic biology is likely to be heavily dependent on computer-based approaches that look 
for molecular signatures, as well as on intelligence. It is not within the scope of this report to discuss intelligence 
activities, and it is recognized that highly sophisticated adversaries may be able to evade even the most elaborate 
attribution approaches. 

One of the most significant developments for identifying agents (in the context of treatment as well as detec¬ 
tion and attribution) is next-generation sequencing and the drastic reductions in cost and time it enables. The 
FBI-led analysis of the 2001 Amerithrax attack samples (which took place before the advent of next-generation 
sequencing) involved the sequencing of a small number of morphologically different isolates at a cost of around 
$100,000 each in a process taking several years. Were such samples to be analyzed using today’s tools, ultra-deep 
characterization of the sample (about 10 billion sequence reads from a full run on a HiSeq™ sequencing system) 
could be performed within 1 week with reagent costs of around $10,000. Looking to the future, it is clear that 
next-generation sequencing will become central to identifying synthetic biology-derived infectious agents. Box 8-2 
describes some of the ways in which next-generation sequencing approaches might be used in this context. 

Synthetic biology is also likely to lead to the development of new detection technologies. As an example, 
Pardee et al. (2014) developed a programmable diagnostic assay that is embedded in paper as a low-cost, sensitive 
diagnostic assay for the presence of Zika virus RNA (Hall and Macdonald, 2016). In another novel approach to 
diagnostics, Lu et al. (2013) describe the engineering of bacteriophages for diagnostic strategies in which phage- 
specific antibodies, quantitative PCR, or a reporter molecule are used to detect amplification of engineered phages 
when the phages encounter target bacteria. Slomovic et al. (2015) describe applications of synthetic biology in 
the development of both in vitro and in vivo diagnostics, including the development of sensing bacteria in which 
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BOX 8-2 

Opportunities Enabled by Next-Generation Sequencing 

The advent of next-generation sequencing opens opportunities for three main approaches that could 
have implications for identifying synthetic biology-derived agents: next-generation sequencing of cultured 
isolates, targeted next-generation sequencing, and unbiased metagenomic (or untargeted) next-generation 
sequencing. 

• Next-generation sequencing of cultured isolates generates high-quality complete pathogen ge¬ 
nomes (for pathogens where culturing is possible and a complete genome is desired). However, 
culturing can require days or weeks, depending on the growth rate in culture of the pathogen(s) 
involved. 

• Targeted next-generation sequencing is a scalable hybrid approach where large numbers of in¬ 
formative regions of known pathogens are enriched via amplifications or capture techniques prior 
to sequencing. Similar to polymerase chain reaction (PCR), however, targeted next-generation 
sequencing can only find the genomic regions it is designed to look for because the results are 
queried against existing databases. 

• Unbiased metagenomic next-generation sequencing is used to examine complex environmental 
or clinical samples when targeting of a list of key organisms is not sufficient. Detection of a novel 
or highly engineered pathogen from a patient is an example of when deep and expensive metage¬ 
nomics sequencing would be indicated. Although they are still nascent, technologies are being 
developed 3 to move such approaches closer to the field (e.g., at the point of contact with a patient). 
Once a new threat is discovered, PCR and targeted next-generation sequencing reagents can be 
rapidly prepared to permit lower-cost and more rapid detection from other samples or victims. 


Examples include nanoscale technologies that support long-read real-time sequencing with analysis done on a 
laptop computer (Quick et al., 2016) and the broad-spectrum Microbial Detection Array (Jaing et al., 2011; Thissen et 
al., 2014), which contains 388,000 DNA probes. 


“sentinel bacteria could reside in the guts of soldiers or aid workers and serve as short term ‘medical records’ 
alerting on the time and scale of contamination or pathogen infection.” These studies, while still in a research 
mode, suggest that synthetic biology tools can help address some of the need for alternative diagnostics that are 
not based on detecting a specific region of a pathogen by real-time PCR. 

Opportunities for Improving Consequence Management Capabilities 

Just as synthetic biology expands the types of malicious activities that may be undertaken, it also expands 
what is possible for beneficial applications. Synthetic biology and related advances (such as the convergent tech¬ 
nologies discussed in Chapter 7) open the possibility of new and more systematic approaches to the development 
of medical countermeasures and other mitigation tools and strategies. Synthetic biology approaches such as rapid 
DNA synthesis, protein design tools, cell-free expression systems, and automation may significantly advance 
consequence management capabilities, especially with regard to the development and testing of medical coun¬ 
termeasures. Such approaches could, for example, provide flexibility in the control of protein expression levels, 
shorten the time to successful countermeasure production, and lower costs. They could potentially even enable 
the development of countermeasures to newly identified agents without ever culturing the agent itself; through 
the use of in silico characterization of an agent’s key components, antigen components for antibody development 
could be synthesized, potentially within hours of detection. Such approaches could represent a promising alterna¬ 
tive to stockpiling countermeasures when the emergence of novel threats (both natural and engineered) is likely. 
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In addition, once bioagent and viable culturing conditions have been identified, the large-scale testing capabilities 
used in synthetic biology could be used to screen candidate countermeasures, for example, by surveying chemical 
small-molecule libraries to identify drug leads or by testing many organism-relevant phages to identify those that 
are potentially lethal to the bacterial strain used in an attack. 

The following sections discuss ways in which synthetic biology could potentially contribute to the develop¬ 
ment of diagnostics, vaccines, and other medical countermeasures. However, the technical barriers to the devel¬ 
opment of synthetic biology-enabled vaccines or therapeutics remain steep, and it is also important to note that 
there must be a compelling business case for their development and a regulatory process for approval of these 
countermeasures before they become reality. Almost 4 years after the emergence of the Ebola virus infection in 
West Africa, we still lack licensed Ebola vaccines, and despite knowing the serious risk of a MERS outbreak outside 
of the Arabian Peninsula, we are still many years away from a licensed effective MERS vaccine. While outside 
the scope of this report, a comprehensive understanding of the feasibility of using synthetic biology to develop 
medical countermeasures would benefit from critical review of both commercial and regulatory considerations. 


New “Vaccine Strains” Through Controlled Attenuation of Viruses 

The replication cycle of viruses is complex, and the fitness of a given virus depends on many factors. One 
important factor is the particular codons incorporated into the DNA or RNA; the preferential use of particular 
codons (or codon pairs), termed codon bias (or codon pair bias), is thought to influence the efficiency of transla¬ 
tion (Buchan et al., 2006). Efforts to optimize codon usage almost invariably result in attenuation of the virus, 
and the more the codon usage bias is disrupted, the more attenuated the resulting vims (Wimmer and Paul, 2011; 
Martinez et ah, 2016). 

Burns et ah (2006) and Coleman et ah (2008) proposed to take advantage of this attenuating phenomenon 
to perform genome-scale manipulation of codon pair bias in poliovirus to develop vaccines in which the degree 
of attenuation could be controlled by the degree of codon substitution performed. The resulting “vaccine strains” 
provided protective immunity in mice and, because of the hundreds of substitutions made, did not revert to viru¬ 
lence. Using synthetic biology tools including large-scale, low-cost construction of desired genomic sequences has 
been proposed as a means of making attenuated vaccines for many other RNA viruses, including influenza virus 
(Mueller et ah, 2010; Yang et ah, 2013; Fan et ah, 2015), chikungunya virus (Nougairede et ah, 2013), respiratory 
syncytial virus (Meng et ah, 2014), simian immunodeficiency virus (as a model for HIV; Vabret et ah, 2014), 
tickborne encephalitis virus (de Fabritus et ah, 2015), vesicular stomatitis virus (Wang et ah, 2015), and dengue 
virus (Shen et ah, 2015). 


Use of DNA Construction to Rapidly Derive Vaccine Stocks 

The 2009 H1N1 pandemic made it clear that new methods of developing influenza vaccines were required 
to speed the response from emergence of a new virus to the development of a vaccine seed stock and production 
and distribution of the vaccine strain. Toward this goal, Dormitzer et ah (2013) developed a synthetic approach, 
constructing the hemagglutinin and neuraminidase genes with minimal errors by annealing many staggered oli¬ 
gonucleotides that overlapped by 30 bases with their neighbors and together covered the full length of each gene. 
Infectious virus was rescued from susceptible cells transfected with the synthetic hemagglutinin and neuraminidase 
genes and plasmid DNAs encoding viral backbone genes. In a proof-of-concept study performed in collaboration 
with the Biomedical Advanced Research and Development Authority, an H7N9 vaccine strain was constructed 
in this manner in 5.5 days; tests demonstrated the antigens expressed by the synthetic genes were immunogenic 
based on their reaction with ferret sera (Dormitzer et al., 2013). This example demonstrates that synthetic biol¬ 
ogy tools can facilitate the rapid derivation of vaccine strains to respond to emerging viral threats. However, the 
commercialization and licensure of vaccines derived in this manner is many years off; having a synthetic biology 
tool that can facilitate the development of a new countermeasure is a major advance, but it is far short of what is 
necessary to make that countermeasure safe, effective, and available. 
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Rapid Development mRNA Vaccines 

Another approach to the development of synthetic vaccines is the use of messenger RNA (mRNA). Petsch 
et al. (2012) demonstrated that mRNAs of influenza hemagglutinin, neuraminidase, and nucleoprotein could be 
transcribed into proteins in vitro to provide protective immunity against homologous influenza virus. Hekele et al. 
(2013) used a synthetic self-amplifying mRNA (SAM) to create a vaccine derived from the hemagglutinin gene of 
the H7N9 influenza virus delivered by a nanoparticle. The vaccine, produced just 8 days after the sequence became 
available, was immunogenic at low doses. SAM vaccines delivered by nanoparticles have also been developed 
against HIV-1 (Bogers et al., 2015) and Zika virus (Pardi et al., 2017). In a further development, Richner et al. 
(2017) also developed a SAM vaccine against Zika virus delivered by nanoparticles but, in that case, a structural 
gene from the Zika virus was engineered to destroy a conserved epitope to eliminate the production of cross-reactive 
antibodies against dengue virus, which would exacerbate dengue disease. These examples raise the speculative 
possibility that self-amplifying mRNAs directly encoding antibody molecules and delivered by nanoparticles 
could be used as a potential therapeutic approach. However, as with the example in the prior section, because of 
regulatory and business factors, it would take years before this approach produces therapeutic applications for use. 


Use of Synthetic Biology Tools to Develop New Therapeutics 

Synthetic biology is also contributing to the development of small-molecule medical countermeasures. The 
development of a yeast strain capable of producing artemisinic acid, the key precursor to the antimalarial drug arte¬ 
misinin, demonstrated that complex plant-based natural products can be produced via synthetic biology (Westfall 
et al., 2012). More recently, compounds such as opioids (Galanie et al., 2015) and penicillin (Awan et al., 2017) 
have similarly been produced in yeast. Development of existing and novel chemicals and materials remains a 
primary interest of both the academic and industrial community, making it likely that the cost and time to develop 
chemical production strains will improve in the future. 

Krishnamurthy et al. (2016) summarized the use of synthetic biology tools in the development of new thera¬ 
peutics, including approaches for the production of new antibiotics and the application of the CRISPR system 
in developing bacteriophages as targeted therapeutics. The enabling impact of synthetic biology in exploring the 
great diversity of natural products that can be used as therapeutics is reviewed by Smanski et al. (2016). Platforms 
for drug discovery can be envisaged using synthetic mammalian genetic circuits, and bacteria, yeasts, and plants 
engineered with synthetic pathways can be utilized for the large-scale production of drug and drug precursor 
compounds (Weber and Fussenegger, 2012). 

In addition to rapid response with conventional countermeasures, such as antibodies and small-molecule drugs, 
synthetic biology may also enable the deployment of new types of countermeasures. For example, gene drives and 
other gene editing methods are being explored for the control of vector populations for illnesses such as malaria 
and Lyme disease (Harris et al., 2012; Esvelt et al., 2014; Hammond et al., 2016). Microbiome-based interventions 
for the control of gastrointestinal infections could also provide a programmable platform for combating bacterial 
threats. For example, Citorik et al. (2014) have described the use of CRISPR/Cas technology to create RNA-guided 
nucleases that act as antimicrobials by targeting specific DNA sequences. These RNA-guided nucleases enable 
modulation of complex bacterial populations by selective knockdown of targeted strains. 


Copyright National Academy of Sciences. All rights reserved. 


Biodefense in the Age of Synthetic Biology 


112 


BIODEFENSE IN THE AGE OF SYNTHETIC BIOLOGY 


SUMMARY 


A comprehensive, in-depth review of strengths and weaknesses in current U.S. or international pro¬ 
grams was outside the scope of this study; as such, this report does not offer a full analysis of mitigation 
capabilities and makes no recommendations pertaining to mitigation priorities. The following observa¬ 
tions indicate areas in which additional attention could help address some of the challenges posed by 
synthetic biology. 

General Observations 

• Classical public health measures such as the disease surveillance system are critical to effective 
mitigation of attacks caused by agents created with synthetic biology. However, synthetic biology 
provides opportunities to engineer around the current system, and cases are likely to arise in which 
the current infrastructure will be insufficient and thus in need of enhancement. 

• Biological and chemical defense strategies that are nimble, as well as adaptable to a wide range 
of threats, are needed because of rapid rates of technological change and uncertainty about which 
approaches an adversary might pursue. 

Prevention and Deterrence 

• Risk management strategies based on defined lists of biological agents, such as the Federal Select 
Agent Program Select Agents and Toxins list, will be insufficient for managing risks arising from the 
application of synthetic biology. Similarly, while measures to control access to physical materials such 
as synthetic nucleic acids and microbial strains have merits, such approaches will not be effective in 
mitigating all types of synthetic biology-enabled attacks. Appropriate preparation for these challenges 
is needed. 

Recognition and Attribution 

• The development of more flexible, untargeted, and multimodal detection technologies such as 
next-generation sequencing and mass spectrometry analysis will facilitate improved identification 
capabilities for synthetic biology-derived agents. 

• The development of epidemiological methods (e.g., surveillance and data collection) that would 
strengthen the ability to detect unusual symptoms or aberrant patterns of disease will be useful. 

Consequence Management 

• Computer-based approaches may provide a number of tools to support the prevention, detection, 
attribution, and consequence mitigation of threats posed by synthetic biology. Such approaches 
represent an area for further exploration. 

• Beneficial applications of synthetic biology for countermeasure research and development are expected 
to provide an opportunity to address concerns raised by synthetic biology, when accompanied by 
corresponding efforts to facilitate the entire development process, including regulatory considerations. 


The ability to respond to a disease outbreak, whether it emerges naturally or from a purposeful attack, is 
complex and dependent on many social, governmental, and biological factors. Recognizing that an outbreak has 
occurred is a vital step in this process. Then, the agent must be identified and medical countermeasures made avail¬ 
able. The prospect that a causative agent may have been created with synthetic biology and is therefore unknown 
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and uncharacterized dramatically increases the complexity of these mitigation activities and underscores the need 
to improve the public health response system. 

In light of this context, it will be vital to maintain the current systems used in the military and civilian 
public health infrastructure. Strengthening this infrastructure in specific areas, including broadening the current 
approaches to surveillance, is important to better enable the detection of an attack that does not elicit “normal” 
symptomology. 

Although an in-depth analysis of preparedness and response capabilities was outside the scope of this report, 
identification and characterization of an agent derived by synthetic biology may be a significant gap in the nation’s 
preparedness because many current diagnostic capabilities are based on commonly seen human pathogens and 
on lists of pathogens designated as high risk. Untargeted approaches to detection that use multiple platforms and 
integrate the data obtained would be expected to be more effective at identifying and characterizing unknowns. 
It is also clear that while advances will need to be made in wet-bench detection technologies, computer-based 
interrogative and forensic methods will become more and more valuable to support prevention, agent identifi¬ 
cation, and attribution. Large-scale success of computational mitigation requires that the attack strain has been 
developed by rational engineering design approaches that are not yet ubiquitous; the development of agents with 
other approaches such as directed evolution will likely remain difficult to prevent or attribute. The difficulty of 
affirming attribution to the level of certainty required for counteractions or incarceration is considerable, even for 
“traditional,” non-engineered bioweapons. 

Finally, synthetic biology is enabling advances in the rapid development and production of medical counter¬ 
measures that may be effective against synthetic biology-derived agents. However, many such efforts, which are 
being pursued in both industry and academia, are still in the research phase, and there remain complex barriers to 
widespread use of these novel approaches, including regulatory hurdles and hurdles to industry involvement. This 
field needs to be monitored carefully over time. 
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Moving Forward: Conclusions and Recommendations 


The age of synthetic biology has brought with it opportunities to transform approaches to treating disease, 
manufacturing chemicals, producing fuels, remediating contaminants, and numerous other applications with ben¬ 
efits to humankind. Some synthetic biology capabilities, however, have dual-use potential—that is, they can be 
misdirected to cause harm to humans, animals, plants, and the environment. This study focuses on the potential 
for such biotechnologies to be used to attack the U.S. military or the American people and assesses the level of 
concern warranted on the part of the U.S. Department of Defense and others responsible for protecting public 
health and national security. The study’s deliberative process included the identification of concepts, approaches, 
and tools that biotechnology comprises in the age of synthetic biology, the identification of specific capabilities 
that an adversary might potentially gain from the misapplication of synthetic biology, and the development of a 
framework to guide an assessment of concerns related to these capabilities. This approach was used to provide 
structure and transparency without being overly prescriptive. The framework was then applied to analyze the state 
of the art of the technology involved in each capability, the feasibility of using the capability to produce an effective 
weapon, and the characteristics and resources an actor would require to carry out an attack. After accounting for, 
in a less in-depth way, proactive and reactive measures that could be taken to mitigate attacks, an overall level of 
concern was determined for each capability relative to the other capabilities considered. Recognizing that future 
advances in knowledge or technology may increase the feasibility or impacts of some capabilities and thus raise 
the level of concern warranted, potential developments were identified that should be monitored and otherwise 
considered going forward. 

Although its primary focus was on the specific capabilities analyzed, the study was carried out with an eye 
toward the broader backdrop of the history and structures of biological sciences and technology, national defense, 
and public health in the United States. The misuse of biological sciences to develop biological weapons predates the 
advent of synthetic biology. A wide range of malicious actors have used or sought to use bioweapons and chemi¬ 
cal weapons, including national governments, small groups or cults, and even individuals. Fortunately, actual use 
of biological weapons has been rare. While there is considerable disagreement among experts about why misuse 
of biology has been rare, or if it is likely to always remain rare, synthetic biology has the potential to change the 
likelihood and consequences of misuse. Though important for myriad beneficial applications, synthetic biology 
and related biotechnologies change the defense landscape by making possible new modes of attack and by lower¬ 
ing the barriers to developing and using biological weapons (and to some extent chemical weapons), potentially 
putting bioweapons within the reach of less-resourced actors. The United States’ approach to biodefense was not 
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designed to counter all the types of weapons (or types of adversaries) that are now possible in the age of synthetic 
biology. One motivation for this report is to help inform the U.S. defense agencies’ efforts to update their approach 
to biodefense in order to detect and respond to these new threats. 

On the positive side, it is expected that synthetic biology and other technologies will enable the development 
of new methods for detecting biological anomalies, new diagnostic tools, and new therapeutics—developments that 
could complement and bolster existing biodefense tools. Since 2001, the United States has significantly expanded 
efforts to counter biological threats, in particular those related to the use of known pathogens to create bioweapons. 
Among other accomplishments, a multipronged approach has been developed to acquire medical countermeasures, 
develop a stockpile system for those countermeasures, boost security and safety in the handling of pathogens, and 
coordinate a response to a biological weapons attack. Given the complicated nature of the biological weapons 
threat, however, it is not possible to be fully prepared for every contingency. Many pathogens that could be used 
to create weapons are widely accessible in laboratories around the world and in natural reservoirs such as infected 
people or animals. The amount of infectious material needed as a seed stock for a weapon is minute, because it 
is possible to grow a few bacterial cells into quantities capable of effecting a large-scale attack. Furthermore, the 
infrastructure and laboratory training needed to develop a biological weapon using a known pathogen are dual 
use and relatively accessible. 

The age of synthetic biology adds to these significant challenges. While the existing U.S. biodefense system is 
designed to defend against specific, naturally occurring pathogens, synthetic biology makes possible the creation 
of new or altered pathogens, as well as new types of biological weapons, and the relevant technologies are gener¬ 
ally accessible all over the world. Synthetic biology also increases the overlap between biological and chemical 
weapons by enabling the use of biological components to make or deliver chemical agents. In determining how to 
plan for and respond to these evolving capabilities, defense and public health agencies are challenged to consider 
these newer threats alongside other risks such as traditional biological weapons threats, threats to national security 
and stability from naturally occurring biological threats (such as pandemics), and threats related to explosives and 
nuclear, chemical, and radiological weapons. In resource-constrained environments, users of the framework and 
assessments presented in this report will need to bear in mind this backdrop of risk in determining how biological 
threats fit into the broader threat landscape. Comparing the risks related to synthetic biology to those related to 
these other types of threats was not within the scope of this study. 

OVERARCHING RECOMMENDATION 

Biotechnology in the age of synthetic biology expands the landscape of potential defense concerns. The 
U.S. Department of Defense (DoD) and its partnering agencies should continue to pursue ongoing strategies 
for chemical and biological defense; these strategies remain relevant in the age of synthetic biology. DoD 
and its partners also need to have approaches to account for the broader capabilities enabled by synthetic 
biology, now and into the future. 

CONCERNS POSED BY SYNTHETIC BIOLOGY-ENABLED CAPABILITIES 

The study identified 12 distinct capabilities—ways in which an adversary could potentially pursue an attack 
using synthetic biology— and grouped these capabilities into three major categories: concerns related to pathogens, 
concerns related to the production of chemicals or biochemicals, and concerns related to bioweapons that alter the 
human host. Each capability was analyzed individually, trends and key considerations were identified within each 
grouping, and each capability was ranked in relation to the other capabilities to determine an overall assessment 
of concerns. Developments that might affect capabilities and concerns in the future were also considered. 

Overall Assessment of Concerns 

Figure 9-1 presents a relative ranking of concerns related to the synthetic biology-enabled capabilities that 
were analyzed. This ranking was generated through an iterative discussion of four factors that increase or decrease 
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Highest Relative Concern 


Re-creating known pathogenic viruses I Making biochemicals via in situ synthesis I Making existing bacteria more dangerous 


■ Manufacturing chemicals or 

biochemicals by exploiting natural 
metabolic pathways 


Manufacturing chemicals or 
biochemicals by creating novel 
metabolic pathways 


Modifying the human microbiome 


Modifying the human immune system 


Modifying the human genome 


Re-creating known pathogenic bacteria 


Creating new pathogens 


Modifying the human genome 

Lowest Relative Concern using human gene drives 


FIGURE 9-1 Relative ranking of concerns related to the synthetic biology-enabled capabilities analyzed. At present, capa¬ 
bilities toward the top warrant a relatively high level of concern while capabilities toward the bottom warrant a relatively low 
level of concern. 


the likelihood or impact of an attack—Usability of the Technology, Usability as a Weapon, Requirements of Actors, 
and Potential for Mitigation—for each capability as compared to the other capabilities. As discussed in Chapter 3 
(Applying the Framework in the Assessment of Concern), this assessment is based on a holistic view of the factors 
and capabilities assessed and is not a formulaic approach. Table 9-1 summarizes the assessment of the specific 
factors considered when analyzing the individual capabilities and Figure 9-2 shows the relative concern for each 
capability, organized by factor. 

While the ranking of concerns has a strong foundation based on the expertise of the committee members and 
the breadth and depth of the committee’s discussions, there are a few important limitations to note. One is that 
the study process did not involve accessing intelligence or other classified information. The study also did not 
consider information related to the capabilities or intents of specific adversaries. Others may use such informa¬ 
tion, along with details about government programs aimed at deterring, detecting, attributing, and addressing the 
consequences of biological attacks, to complement and expand upon this report’s analysis. Likewise, additional 
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TABLE 9-1 Relative Level of Concern Related to Each Factor for Each Capability Considered 



Usability of the 
Technology 

Usability as a 
Weapon 

Requirements of 
Actors 

Potential for 
Mitigation 

Level of concern for re-creating known pathogenic 
viruses 

High 

Medium-high 

Medium 

Medium-low 

Level of concern for re-creating known pathogenic 
bacteria 

Low 

Medium 

Low 

Medium-low 

Level of concern for making existing viruses more 
dangerous 

Medium-low 

Medium-high 

Medium 

Medium 

Level of concern for making existing bacteria more 
dangerous 

High 

Medium 

Medium 

Medium 

Level of concern for creating new pathogens 

Low 

Medium-high 

Low 

Medium-high 

Level of concern for manufacturing chemicals or 
biochemicals by exploiting natural metabolic pathways 

High 

High 

Medium 

Medium-high 

Level of concern for manufacturing chemicals or 
biochemicals by creating novel metabolic pathways 

Medium-low 

High 

Medium-low 

Medium-high 

Level of concern for making chemicals or biochemicals 
via in situ synthesis 

Medium-high 

Medium 

Medium 

High 

Level of concern for modifying the human microbiome 

Medium-low 

Medium 

Medium 

Medium-high 

Level of concern for modifying the human immune 
system 

Medium 

Medium-low 

Low 

High 

Level of concern for modifying the human genome 

Medium-low 

Low 

Medium-low 

High 

Level of concern for modifying the human genome 
using human gene drives 

Low 





details about potential mitigation options could be used to expand upon the report’s analysis. In addition, there 
was no attempt to weigh the likelihood that an actor would choose to use synthetic biology instead of a more 
“traditional” approach when pursuing an outcome that could be achieved with or without synthetic biology. For 
example, an actor seeking to deploy a known pathogen in an attack could acquire the pathogen by re-creating 
it using synthetic biology or by stealing existing cultures of the pathogen from a legitimate research laboratory. 
Similarly, an actor seeking to acquire a given chemical or toxin may choose to engineer a microbe to produce it 
or may produce it through traditional chemical synthesis. In such cases, determining which method is more likely 
would require information about an actor’s intentions, resources, and capabilities, which was beyond the scope of 
this study. The rankings are therefore agnostic to the availability of these alternative routes and are based solely on 
the capabilities that synthetic biology provides to an actor. It also follows that as technologies advance, an actor’s 
proclivity to pursue a given route may change. 

The capabilities were ranked in relation to each other and grouped into five major levels of concern, relative 
to each other. There was no attempt to quantify the relative levels of concern; as such, the dividing lines within 
Figure 9-1 are not intended to indicate that one capability poses twice (or any numerical multiple of) the level of 
concern compared to the capability below it. In addition, the grouping of two capabilities into the same category 
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of concern does not indicate that those capabilities are identical in terms of the factors considered or the relative 
values placed on those factors. For example, re-creating known pathogenic bacteria and creating new pathogens 
are associated with a similar overall level of concern, but for different reasons. Finally, it is important to note that 
this assessment represents a snapshot in time and represents the range of concern associated with each capability, 
with particular exceptions or special cases noted in Chapters 4-6, and will change as knowledge and technologies 
advance. 

Capabilities currently warranting the highest relative level of concern include re-creating known pathogenic 
viruses, making biochemicals via in situ synthesis, and the use of synthetic biology to make existing bacteria more 
dangerous. These capabilities are based on technologies and knowledge that are readily available to a wide array 
of actors. The ability to mitigate attacks related to these capabilities would depend on the effectiveness of existing 
countermeasures, such as antibiotics or vaccines, toward the agents used. 

Capabilities posing a moderate-to-high relative level of concern include manufacturing chemicals or biochemi¬ 
cals by exploiting natural metabolic pathways and making existing viruses more dangerous. These capabilities 
are also supported by available technologies and knowledge but involve more constraints and would likely be 
limited by factors related to both biology and skill. For example, while viral genomes are easily manipulated on 
a molecular basis, constraints on what types of change those genomes can accommodate limit capability in this 
area. Similarly, at present, it takes a fair amount of skill to engineer a bacterium to express a pathway to efficiently 
produce a chemical or biochemical. While both capabilities are considered to be in the same grouping, modifying 
viral characteristics intentionally using rational design remains a substantial challenge, making the modification 
of an existing virus slightly less concerning at present. Similar to the capabilities in the top category of relative 
concern, mitigation options for these capabilities depend largely on existing infrastructure. 

Capabilities posing a moderate relative level of concern include manufacturing chemicals or biochemicals 
by creating novel metabolic pathways, efforts to modify the human microbiome to cause harm, efforts to modify 
the human immune system, and efforts to modify the human genome. Although conceivable, these capabilities 
are more futuristic—likely limited by available knowledge and technology, as described in Chapters 5 and 6. 
Flowever, there are significant forces driving rapid advancement in all of these areas. Manufacturing chemicals or 
biochemicals by creating novel metabolic pathways was placed highest in this grouping because once a synthesis 
pathway for a chemical or biochemical is known, the tools for engineering a bacterial (or other) cell to produce it 
are fairly well developed. While the detailed pathways by which certain chemicals may be synthesized in a bio¬ 
logical organism are not yet known, commercial applications are driving progress in this area. The modification 
of the human microbiome is placed next in this grouping. Although current understanding of the complex and 
dynamic system that is our microbiome is relatively low, there are significant efforts to increase this knowledge 
because of the desire to modulate the microbiome to improve human health. Modification of the immune system 
and modification of the human genome are the third and fourth capabilities in this grouping, largely due to the 
limits of available knowledge related to the mechanisms of action and means of delivery that would be involved 
in developing and using bioweapons based on these capabilities. Flowever, these areas are also being vigorously 
pursued because of clear biomedical applications. 

Capabilities warranting a lower relative level of concern include re-creating known pathogenic bacteria and 
creating new pathogens. These capabilities involve major challenges from the standpoint of both design and 
implementation. In particular, while the technology for synthesizing and assembling larger segments of DNA con¬ 
tinues to advance, the synthesis of bacteria is currently limited by constraints on synthesizing, manipulating, and 
booting an entire bacterial genome. In addition, antibiotics and other therapeutics are available to counter many 
bacterial pathogens. Constructing a totally novel pathogen has tremendous challenges. If it is difficult to build a 
known bacterium, it is all the more challenging to design one from scratch. In this regard, an actor may decide to 
try to design a virus, but in this case one would be working against the large barrier of evolutionary constraints 
created by hundreds of millions of years of co-evolution between viruses and their hosts. That said, combinatorial 
approaches could enable the exploration of sequence space that nature has not yet achieved. 

The use of human gene drives warrants a minimal level of concern because it would be impractical to rely on 
sexual reproduction for a gene drive to spread through a human population. 

In addition to the relative level of concern posed by individual capabilities, the study included consideration of 
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Re-creating known pathogenic 
bacteria 


Creating new pathogens 


Modifying the human genome 
using human gene drives 


Making existing viruses 
more dangerous 


Manufacturing chemicals or 
biochemicals by creating novel 
metabolic pathways 


Modifying the human microbiome 


Modifying the human 
genome 


Modifying the human 
immune system 


Making biochemicals 
via in situ synthesis 


Re-creating known pathogenic 
viruses 


Making existing bacteria 
more dangerous 


Manufacturing chemicals or 
biochemicals by exploiting natural 
metabolic pathways 


Low 


Medium 

Low 


Medium 


Medium 

High 


High 


Relative Level of Concern - Usability of the Technology 


Modifying the human 
genome 


Modifying the human 
immune system 


Re-creating known pathogenic 
bacteria 


Making existing bacteria 
more dangerous 


Making biochemicals 
via in situ synthesis 


Modifying the human microbiome 


Re-creating known pathogenic 
viruses 


Making existing viruses 
more dangerous 


Creating new pathogens 


Manufacturing chemicals or 
biochemicals by exploiting natural 
metabolic pathways 


Manufacturing chemicals or 
biochemicals by creating novel 
metabolic pathways 


Low 


Medium 

Low 


Medium 


Medium 

High 


High 


Relative Level of Concern - Usability as a Weapon 


FIGURE 9-2 Relative level of concern related to each factor for each capability considered. NOTE: Coloring indicates the 
chapter in which the assessment for each capability is presented: Chapter 4 (orange), Chapter 5 (blue), or Chapter 6 (green). 


how two or more capabilities may be used in combination. Such an approach could create synergies that result in 
either a more dangerous weapon or using one capability to overcome barriers that currently hinder another capabil¬ 
ity. For example, a pathway for the production of a toxin could potentially be implanted in the human microbiome, 
an “intersectional” approach considered to warrant a high level of concern. Similarly, particular genes or RNA 
molecules that modulate the immune system could potentially be mounted on a virus to lead to greater harm than 
either the genes or the virus would on their own. Going forward, it will be important to continue to consider how 
scientific and technological advances may synergize to improve existing approaches or create novel ones. 

Assessment of Specific Types of Capabilities 

The assessment of overall concerns draws upon the analysis of each of the 12 specific capabilities consid¬ 
ered. In addition to conclusions related to the relative assessment of concerns, underlying themes and conclusions 
emerged when each individual capability was examined in the context of other capabilities in the same category 
(e.g., when assessing all approaches that involve pathogens). Underlying themes and conclusions related to patho¬ 
gens, the production of chemicals or biochemicals, and bioweapons that alter the human host are discussed below. 
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Re-creating known pathogenic 
bacteria 


Creating new pathogens 


Modifying the human 
immune system 


Manufacturing chemicals or 
biochemicals by creating novel 
metabolic pathways 


Modifying the human 
genome 


Re-creating known pathogenic 
viruses 


Making existing viruses 
more dangerous 


Making existing bacteria 
more dangerous 


Manufacturing chemicals or 
biochemicals by exploiting natural 
metabolic pathways 


Making biochemicals 
via in situ synthesis 


Modifying the human microbiome 


Low 


Medium Medium Medium 

Low High 

Relative Level of Concern - Requirements of Actors 


High 


Creating new pathogens 


Re-creating known pathogenic 
viruses 


Re-creating known pathogenic 
bacteria 


Making existing viruses 
more dangerous 


Making existing bacteria 
more dangerous 


Manufacturing chemicals or 
biochemicals by exploiting natural 
metabolic pathways 


Manufacturing chemicals or 
biochemicals by creating novel 
metabolic pathways 


Modifying the human microbiome 


Making biochemicals 
via in situ synthesis 


Modifying the human 
immune system 


Modifying the human 
genome 


Low 


Medium Medium Medium 

Low High 


High 


Relative Level of Concern - Potential for Mitigation 


FIGURE 9-2 Continued. 


Pathogens 

Chapter 4 focuses on the use of biotechnology to create pathogenic agents, including the possibility of re¬ 
creating known pathogens, modifying both pathogenic and nonpathogenic microbes to enhance their capability to 
cause harm, and creating new pathogens. Rapid advances in DNA synthesis technology have made it possible to 
obtain a pathogen without direct access to the infectious agent itself. Today, any viral genome can be synthesized 
based on published sequences, and booting that sequence into a replicating form is also feasible for most viruses. 
Similar approaches to creating bacteria are currently more difficult due to the size of their genomes and the fact 
that they are living organisms and not obligate intracellular parasites like viruses, though these technical bottle¬ 
necks will likely be reduced over time. Because known pathogens have been studied extensively, and because 
the existence (or lack) of medical countermeasures is also known, there is a relatively high level of confidence in 
assigning relative levels of concern to the re-creation of known viruses and bacteria. For example, it is currently 
easier to re-create a virus than a bacterium in the laboratory, though prophylactics and therapeutics against these 
agents sometimes, but not always, mitigate the level of concern. 

The technologies to manipulate microbial genomes to add new phenotypes such as drug resistance have 
been available for decades and continue to be made simpler. Here again, there are differences in the feasibility of 
applying these approaches to bacteria and viruses; whereas adding genes to bacteria does not usually significantly 
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affect the ability of the bacteria to grow and divide, the way viral genomes have evolved makes them more sensi¬ 
tive to changes, such that altering viral genomes often reduces their virulence and replication abilities. Generally 
speaking, phenotypic modifications to pathogens may lessen the capability for mitigation. One notable example 
is adding antibiotic resistance to bacteria or adding antiviral resistance to those few viruses for which antivirals 
exist. Engineering bacteria or viruses to resist existing therapeutics would likely be relatively straightforward to 
accomplish and could seriously undermine the ability to mitigate an attack by treating infected individuals. 


Production of Chemicals or Biochemicals 

As discussed in Chapter 5, engineering organisms to produce chemicals or biochemicals is becoming more 
feasible as researchers learn more about the natural pathways used to produce these substances and as better tools 
are developed to build predictable synthetic pathways. Just as drug resistance can be engineered into bacteria, 
so can simple or even complex biosynthetic pathways. This capability is being driven largely by a desire to use 
biotechnology to produce useful molecules, but can be subverted by those with malicious intent. The commer¬ 
cial drivers behind these approaches will certainly widen the bottlenecks over time. Moreover, combinatorial 
approaches and the use of computer algorithms to aid in pathway design will bring down barriers to building new 
synthetic pathways. 

Mitigation of attacks based on these modified organisms could be difficult to achieve. Currently, when pre¬ 
sented with the signs of a chemical attack, first responders and medical professionals are not trained to suspect 
that the chemical was produced or delivered biologically. Similarly, having a bacterium that normally does not 
produce a toxin act as the delivery vehicle for that toxin could thwart existing diagnostic tests. 1 Therefore, while 
at present there are barriers to effectively developing these capabilities, the potential deficiencies in mitigation 
raise the level of concern. 


Bioweapons That Alter the Human Host 

Chapter 6 focuses on the possible vulnerabilities and means of attack that are more closely related to the human 
body itself. Here, one focus was on engineering the microbiomes of the gut, skin, oral cavity, or nasopharyngeal 
space. Such manipulations could be used, for example, to directly affect the function of the gastrointestinal tract 
or the skin, cause dysbiosis, or even potentially affect other aspects of human physiology such as the immune or 
nervous systems. If such manipulations can be achieved, the level of concern would be high because the oppor¬ 
tunities for mitigation could be quite limited. The detailed interactions that occur in the microbiome environment 
are being studied intensively, and knowledge in this area is constantly increasing. 

The study also included consideration of approaches that could potentially be used to modify the human 
immune system by inducing immune suppression or hyperreactivity or by using immunosuppressive agents in 
combination with existing pathogens. Potential approaches that use genes or RNAs as weapons, use genome edit¬ 
ing, or use human gene drives were also considered. In general, these approaches pose a lower level of concern 
with respect to the technologies, actors’ capabilities, and organizational footprints, because of the uncertainties 
associated with obtaining a useful weapon given the immature state of these areas of research. However, due to the 
novelty of these approaches, it is possible that if such approaches were used successfully, options for mitigation 
could be fairly limited, thus somewhat increasing the level of concern. The notable exception to these concerns 
is the use of human gene drives to alter the human genome. Because gene drives require sexual reproduction to 
spread, it would be exceedingly difficult to affect change to large populations of humans without waiting many, 
many generations. This capability was therefore placed in the lowest level of concern. It is noted, however, that 
using gene drives to alter other organisms such as mosquito vectors, in an effort to improve their ability to transmit 
pathogens (or to broaden the list of pathogens they can transmit) may become a concern as more is learned about 
the interactions between pathogens and insect vectors. 


1 Depending on the site or type of infection, diagnostics are often based on species identification, and therefore the presence of a toxin might 
be missed if the species is not one that normally produces a toxin. 
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Potential Developments to Monitor 

This report’s analysis necessarily reflects a snapshot in time, given understanding of current technologies and 
capabilities. As knowledge and biotechnology continue to evolve, it can be expected that current bottlenecks will 
open and current barriers will be broken. To consider how such developments might affect biodefense concerns, 
key bottlenecks and barriers were identified that, if overcome, could substantially increase the feasibility or impact 
of a potential attack and thus increase the level of concern warranted. It is impossible to predict precisely when 
the next fundamental breakthrough in technology with wide-ranging applications (and implications), akin to PCR 
tools or the gene editing platform CRISPR/Cas9, will arise or even what that technology might be. Such develop¬ 
ments are influenced by the drivers of commercial and academic research, as well as by possible converging or 
synergistic technologies that may come from outside the field of synthetic biology. The use of a framework such 
as the one presented in this report facilitates the identification of bottlenecks and barriers, as well as the ability 
to recognize when bottlenecks and barriers have been overcome, by identifying the types of technological capa¬ 
bilities that would facilitate the production and use of synthetic biology-enabled bioweapons. A summary of key 
bottlenecks and barriers and areas worth monitoring is provided in Table 9-2. Based on knowledge of the synthetic 
biology field, the table notes areas of commercial activity that could speed the process toward overcoming these 
bottlenecks and barriers. 

Conclusions and recommendations were developed based on the analysis of individual synthetic biology- 
enabled capabilities, the holistic assessment of relative levels of concern for all capabilities considered, and iden¬ 
tification of bottlenecks and barriers that, if overcome, could affect the level of concern in the future. 


TABLE 9-2 Bottlenecks and Barriers That Currently Constrain the Capabilities Considered and Developments 
That Could Reduce These Constraints 0 


Capability 

Bottleneck or Barrier 

Relevant Developments to Monitor 

Re-creating known pathogenic 
viruses (Chapter 4) 

Booting 

Demonstrations of booting viruses with synthesized genomes 

Re-creating known pathogenic 
bacteria (Chapter 4) 

DNA synthesis and assembly 

Improvements in synthesis and assembly technology for 
handling larger DNA constructs 


Booting 

Demonstrations of booting bacteria with synthesized genomes 

Making existing viruses more 
dangerous (Chapter 4) 

Constraints on viral genome 
organization 

Increased knowledge of viral genome organization and/ 
or demonstration of combinatorial approaches capable of 
facilitating larger-scale modifications to viral genome 


Engineering complex viral 
traits 

Increased knowledge of determinants of complex viral traits, 
as well as how to engineer pathways to produce them 

Making existing bacteria more 
dangerous (Chapter 4) 

Engineering complex bacterial 
traits 

Advances in combinatorial approaches and/or increased 
knowledge of determinants of complex bacterial traits, as well 
as how to engineer pathways to produce them 

Creating new pathogens 
(Chapter 4) 

Limited knowledge regarding 
minimal requirements for 
viability (in both viruses and 
bacteria) 

Increased knowledge of requirements for viability in viruses 
or bacteria 


Constraints on viral genome 
organization 

Increased knowledge of viral genome organization and/ 
or demonstration of combinatorial approaches capable of 


facilitating larger-scale modifications to viral genome 


continued 
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TABLE 9-2 Continued 


Capability 

Bottleneck or Barrier 

Relevant Developments to Monitor 

Manufacturing chemicals or 
biochemicals by exploiting 
natural metabolic pathways 

Tolerability of toxins to the 
host organism synthesizing the 
toxin 

Pathway elucidation, improvements in circuit design, and 
improvements in host (“chassis”) engineering to make toxins 
tolerable to the host organism synthesizing the toxin 

(Chapter 5) 

Pathway not known 

Pathway elucidation and/or demonstrations of combinatorial 
approaches 


Challenges to large-scale 
production 

Improvements in intracellular and industrial productivity 

Manufacturing chemicals or 
biochemicals by creating novel 
metabolic pathways (Chapter 

Tolerability of toxins to the 
host organism synthesizing the 
toxin 

Pathway elucidation and/or improvements in circuit design 
and/or improvements in host (“chassis”) engineering to make 
toxins tolerable to the host organism synthesizing the toxin 

5) 

Engineering enzyme activity 

Increased knowledge of how to modify enzymatic functions to 
make specific products 


Limited knowledge of 
requirements for designing 
novel pathways 

Improvements in directed evolution and/or increased 
knowledge of how to build pathways from disparate organisms 


Challenges to large-scale 
production 

Improvements in intracellular and industrial productivity 

Making biochemicals via in 
situ synthesis (Chapter 5) 

Limited understanding of 
microbiome 

Improvements in knowledge related to microbiome 
colonization of host, in situ horizontal transfer of genetic 
elements, and other relationships between microbiome 
organisms and host processes 

Modifying the human 
microbiome (Chapter 6) 

Limited understanding of 
microbiome 

Improvements in knowledge related to microbiome 
colonization of host, in situ horizontal transfer of genetic 
elements, and other relationships between microbiome 
organisms and host processes 

Modifying the human immune 
system (Chapter 6) 

Engineering of delivery system 

Increased knowledge related to the potential for viruses or 
microbes to deliver immunomodulatory factors 


Limited understanding of 
complex immune processes 

Knowledge related to how to manipulate the immune system, 
including how to cause autoimmunity and predictability across 
a population 

Modifying the human genome 
(Chapter 6) 

Means to engineer horizontal 
transfer 

Increased knowledge of techniques to effectively alter 
the human genome through horizontal transfer of genetic 
information 


Lack of knowledge about 
regulation of human gene 
expression 

Increased knowledge related to regulation of human gene 
expression 


"Shading indicates developments thought to be propelled by commercial drivers. Some approaches, such as combinatorial approaches and 
directed evolution, may allow bottlenecks and barriers to be widened or overcome with less explicit knowledge or tools. 
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Conclusions and Recommendations: Synthetic Biology Expands What Is Possible 

Synthetic biology expands what is possible in creating new weapons. It also expands the range of actors 
who could undertake such efforts and decreases the time required. Based on this study’s analysis of the poten¬ 
tial ways in which synthetic biology approaches and tools may be misused to cause harm, the following specific 
observations were made: 

(a) Of the potential capabilities assessed, three currently warrant the most concern: (1) re-creating 
known pathogenic viruses, (2) making existing bacteria more dangerous, and (3) making harmful 
biochemicals via in situ synthesis. The first two capabilities are of high concern due to usability of the 
technology. The third capability, which involves using microbes to produce harmful biochemicals in 
humans, is of high concern because its novelty challenges potential mitigation options. 

(b) With regard to pathogens , synthetic biology is expected to (1) expand the range of what could be 
produced, including making bacteria and viruses more harmful; (2) decrease the amount of time 
MBBBBMhrenglneeTJSUiElirdWMsmsMaMiiai^^HB1—iltfkessireli 
efforts. The creation and manipulation of pathogens is facilitated by increasingly accessible technologies 
and starting materials, including DNA sequences in public databases. A wide range of pathogen charac¬ 
teristics could be explored as part of such efforts. 

(c) With regard to chemicals, biochemicals, and toxins, synthetic biology blurs the line between chemical 

and biological weapons. High-potency molecules that can be produced through simple genetic pathways 
are of greatest concern, because they could conceivably be developed with modest resources and orga¬ 
nizational footprint. 

(d) It may be possible to use synthetic bioiogy to modulate human physiology in novel ways, These 
ways include physiological changes that differ from the typical effects of known pathogens and chemi¬ 
cal agents. Synthetic biology expands the landscape by potentially allowing the delivery of biochemicals 
by a biological agent and by potentially allowing the engineering of the microbiome or immune system. 
Although unlikely today, these types of manipulations may become more feasible as knowledge of com¬ 
plex systems, such as the immune system and microbiome, grows. 

(e) Some malicious applications of synthetic biology may not seem plausible now but could become 
achievable if certain barriers are overcome. These barriers include knowledge barriers, as is the case 
for building a novel pathogen, or technological barriers, as in engineering complex biosynthetic pathways 
into bacteria or re-creating known bacterial pathogens. It is important to continue to monitor advances in 
biotechnology that may lower these barriers. 

FUTURE USE OF THE FRAMEWORK 

A framework that can be both relatively straightforward and enduring in its utility is valuable. There are many 
different types of frameworks that have been applied to issues related to the misuse of biological agents, each of 
which has its advantages and disadvantages. The framework presented in this report specifies a process to facili¬ 
tate the consideration of expert opinions regarding the level of concern about specific synthetic biology-enabled 
capabilities or combinations of capabilities. The subjective nature of the framework requires that its users have 
familiarity with the field of biotechnology and, as appropriate, that domain experts are enlisted to provide and 
evaluate pertinent data and fill in any gaps in expertise. The technical depth and breadth of this study committee, 
along with the processes used to facilitate its discussions, helped to provide a thorough assessment while prevent¬ 
ing individual perspectives from dominating the discussions. 

Nonetheless, there are limitations to the framework’s use in the context of this study. Specifically, the study task 
did not include consideration of intelligence information about the intents or capabilities of potential actors who 
may seek to misuse life sciences, nor did it include a comprehensive analysis of the U.S. government’s capabilities 
related to preparedness for and mitigation of attacks. Therefore, this report does not represent a threat assessment. 
By combining this report’s assessment of concern with intelligence and other information, others could, in the 
future, assess vulnerabilities and risks to inform decision making. 


Copyright National Academy of Sciences. All rights reserved. 


Biodefense in the Age of Synthetic Biology 


126 


BIODEFENSE IN THE AGE OF SYNTHETIC BIOLOGY 


Conclusions and Recommendations: A Framework for Assessing Concern Contributes to Planning 

The DoD and its interagency partners should use a framework in assessing synthetic biology capabili¬ 
ties and their implications. 

(a) A framework is a valuable tool for parsing the changing biotechnology landscape. 

(b) Using a framework facilitates the identification of bottlenecks and barriers, as well as efforts to 
monitor advances in technology and knowledge that change what is possible. 

(c) A framework provides a mechanism for incorporating the necessary technical expertise into the 
assessment. A framework enables the participation of technical experts in synthetic biology and biotech¬ 
nology along with experts in complementary areas (e.g., intelligence and public health). 

BIODEFENSE IMPLICATIONS OF THE AGE OF SYNTHETIC BIOLOGY 

It has been stated on numerous occasions, by both scientific and political leaders, that the 21st century is the 
century of the life sciences (U.S. Congress, 2000). Much of the excitement and anticipation comes from the promise 
that advances in biotechnology offer to society. But, as with previous expansions in technological capabilities, the 
potential for benefit also comes along with potential risks that the technology could be misused to cause harm. It 
is therefore wise for the U.S. government to pay close attention to rapidly advancing fields such as synthetic biol¬ 
ogy, just as it did to advances in chemistry and physics during the Cold War era. Approaches modeled after those 
taken to counter Cold War threats are not sufficient for biological and biologically-enabled chemical weapons in 
the age of synthetic biology. On the other hand, the nation’s experience preparing for naturally occurring diseases 
provides a strong foundation to build upon in developing strategies to prevent and respond to emerging biological 
threats and biologically-enabled chemical threats. While this study does not constitute a threat assessment and 
does not make specific recommendations regarding addressing current vulnerabilities, several areas were identified 
that warrant attention as the nation seeks to bolster its preparedness and defense capabilities. 


Conclusions and Recommendations: A Range of Strategies Is Needed to Prepare and Respond 

Many of the traditional approaches to biological and chemical defense preparedness will be relevant to 
synthetic biology, but synthetic biology will also present new challenges. The DoD and partner agencies will 
need approaches to biological and chemical weapons defense to meet these new challenges. 

(a) The DoD and its partners in the chemical and biological defense enterprise should continue 
exploring strategies that are applicable to a wide range of chemical and biodefense threats. Nimble 
biological and chemical defense strategies are needed because of rapid rates of technological change, as 
well as strategies adaptable to a wide range of threats because of uncertainty about which approaches an 
adversary might pursue. 

(b) The potential unpredictability related to how a synthetic biology-enabled weapon could manifest 
creates an added challenge to monitoring and detection. The DoD and its partners should evalu¬ 
ate the national military and civilian infrastructure that informs population-based surveillance, 
identification, and notification of both natural and purposeful health threats. An evaluation should 
consider whether and how the public health infrastructure needs to be strengthened to adequately recognize 
a synthetic biology-enabled attack. Ongoing evaluation will support responsive and adaptive management 
as technology advances. 

(c) The U.S. government, in conjunction with the scientific community, should consider strategies that 
manage emerging risk better than current agent-based lists and access control approaches. Strategies 
based on lists, such as the Federal Select Agent Program Select Agents and Toxins list, will be insufficient 
for managing risks arising from the application of synthetic biology. While measures to control access 
to physical materials such as synthetic nucleic acids and microbial strains have merits, such approaches 
will not be effective in mitigating all types of synthetic biology-enabled attacks. 
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Exploration Areas 

Although it was outside the scope of this study to comprehensively assess the preparedness and response 
capabilities of existing military and civilian defense and public health enterprises or determine how to address gaps, 

exploration of the following areas is suggested to address some of the challenges posed by synthetic biology: 

(a) Developing capabilities to detect unusual ways in which a synthetic biology-enabled weapon may 
manifest. For consequence management, expanding the development of epidemiological methods (e.g., 
surveillance and data collection) would strengthen the ability to detect unusual symptoms or aberrant 
patterns of disease. Enhancing epidemiological methods will have an additional benefit of strengthening 
the ability to respond to natural disease outbreaks. 

(b) Harnessing computational approaches for mitigation. The role of computational approaches for pre¬ 
vention, detection, control, and attribution will become more important with the increasing reliance of 
synthetic biology on computational design and computational infrastructure. 

(c) Leveraging synthetic biology to advance detection, therapeutics, vaccines, and other medical 
countermeasures. Taking advantage of beneficial applications of synthetic biology for countermeasure 
research and development is expected to prove valuable, along with corresponding efforts to facilitate 
the entire development process, including regulatory considerations. 

A great deal of the scientific knowledge, materials, and techniques required for beneficial biological research 
or development could be misused. It is extremely challenging to prevent this, however, because the scientific 
community relies upon access to publications, genetic sequences, and biological materials to advance the state of 
science and, importantly, to reproduce the results of others to verify findings and build upon them. Biotechnology 
presents a “dual-use dilemma” (NRC, 2004), and synthetic biology is part of this dilemma. Although dual-use 
research is going to remain a challenge for scientists and for the nation’s defense, there is reason for optimism 
that, with continued monitoring of biotechnology capabilities and strategic biodefense investments, the United 
States can foster fruitful scientific and technological advances while minimizing the risk that these same advances 
will be used for harm. 
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Specific Synthetic Biology Concepts, 
Approaches, and Tools 


This appendix describes a core set of current synthetic biology concepts, approaches, and tools that enable 
each step of the Design-Build-Test (DBT) cycle, focusing particularly on areas in which advances in biotechnology 
may raise the potential for malicious acts that were less feasible before the age of synthetic biology. Although the 
examples presented are intentionally quite broad and somewhat arbitrary—and do not represent an exhaustive list 
of all technologies or all possible applications of synthetic biology—they provide useful context for understanding 
how specific tools or approaches might enable the potential capabilities analyzed in Chapters 4-6. In addition, 
while the main known concepts, approaches, and tools at the time of writing are captured, this list will need to be 
updated and modified to stay relevant as the science advances. The relative maturity of the different technologies 
is described in Table A-l to give a sense of which technologies are in widespread use, which are just in develop¬ 
ment, and which are somewhere in between. 


DESIGN 

Concepts, approaches, and tools most closely aligned with the Design phase of the DBT cycle are those that 
enable researchers to envision and plan the engineering of biological components. This report takes a broad view 
of Design to include both the technologies that enable design and design objectives; as such, this grouping includes 
both synthetic biology technologies and examples of the types of applications that they might enable. 

Automated Biological Design 

Engineering biological components can be a challenging proposition; organisms are complex, and scientific 
understanding of biology remains incomplete. Designers must consider the effects of a large array of potential 
variables, including DNA bases, codons, amino acids, genes and gene segments, regulatory elements, environ¬ 
mental context, empirical and theoretical design rules, and many other elements. Automated biological design, 
known in the field as bio-design automation, lowers the barrier to designing genetic constructs by automating 
some decisions and processes that would otherwise require a high level of expertise or a long time to carry out. 
This automation is enabled by tools such as computer algorithms, software environments, and machine learning. 

Some automated design tools help researchers specify the desired function of the biological construct or how 
the parts in the construct will be organized. Other tools help to transform these specifications into collections of 
realizable DNA constructs; many software tools, for example, help manage and visualize synthetic DNA sequences 
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TABLE A-l Summary of Relative Maturity of Selected Synthetic Biology Concepts, Approaches, and Tools" 


In Use by In Use by the In Use by the In Use by 

Developers of the Synthetic Biology Molecular Biology Amateur 

In Development Technology Community Community Biologists 


CRISPR/Cas9 

Genetic logic 

Machine learning 

Multiplexed genome editing 
(MAGE/CRISPR) 

DNA synthesis and assembly 

Codon optimization 

Multi-input logic circuits 

Combinatorial DNA assembly 

Automated DNA assembly 

De novo protein structure 
prediction 

Bioprospecting 

Broad-spectrum horizontal transfer 
vectors 

Xenobiology (incorporation of 
nonnatural nucleotides or amino 
acids) 

Microbiome engineering 
Building genes 
Building chromosomes 
Building genomes 
Booting genomes 
High-throughput screening 
Directed evolution 



"For each column, darker shading indicates routine use for that community, lighter shading indicates emerging use, and white background 
indicates little or no use. Adoption flows from left to right in most cases. 


as they are being designed. Computer software can greatly enhance the designer’s ability to predict a design’s 
function and performance, making it more feasible to engineer increasingly complex biological functions and 
potentially reducing the time and resources required to generate and test designs. Some predictive components of 
these tools are fairly straightforward, such as the virtual translation of a gene’s DNA sequence into the correspond¬ 
ing chain of amino acids. Other functions are more complex, such as the predicted cross-interaction of transcrip¬ 
tion factors in a genetic circuit. 1 There has been significant progress, for example, in the automated compilation 
of in vitro and in vivo transcription-dependent or translation-dependent genetic circuits starting from high-level 
functional or performance specifications (Brophy and Voigt, 2014). Software can also allow designers to create 


1 “Genetic circuits" in synthetic biology are analogous to electronic circuits. Just as electronic circuits are comprised of individual electronic 
components (e.g., resistors, transistors) assembled together to perform a desired function (e.g., sensing, actuation), genetic circuits are con¬ 
structed from the assembly of biological components. These components are encoded in the DNA and may include, for example, DNA binding 
sites, promoters, or transcription factors. As an example, a genetic circuit could be constructed to detect (sense) a particular metabolite and to 
initiate expression of a protein once the metabolite concentration crosses a certain threshold (actuate). 
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large libraries of combinatorial variants quickly and use machine learning to converge on optimal solutions. This 
allows for higher levels of design abstraction and the use of standards to exchange information globally between 
software frameworks. 

In addition to aiding biological design, automation tools are used in other phases of the DBT cycle, as well. For 
example, researchers can use automated assembly tools to plan how to physically create their designed constructs 
most efficiently or to send designs created in silico directly to remote manufacturing facilities. These designs can 
be distributed across locations to massively parallelize the construction process. Once a construct is assembled, 
automated testing tools can be used to verify that it functions as designed. Taken together, a greater predictive 
capacity, automated assembly, and rapid testing can be expected to facilitate the engineering of increasingly dif¬ 
ficult biological functions. Some example applications of automated biological design that are useful to consider 
in the context of biodefense include design of genes and proteins and bioprospecting and pathway design. 


Design of Genes and Proteins 

Automated design programs can create thousands of genetic design variants by combining libraries of genetic 
“parts” in various ways, an approach known as combinatorial library design. The developers of such programs 
typically build certain design rules into the algorithm to increase the chances that the designs created will be 
functional from a biological standpoint. Once the program is in use, the variants it creates can be used to improve 
design rules via machine learning or statistical analysis. Through this learning process the programs are able to 
refine subsequent designs; the process also could ultimately remove human designers from the design process, 
allowing DNA design, assembly, and verification equipment to explore large genetic design spaces automatically. 
The results of combinatorial library design programs can be stored and shared electronically for researchers to 
validate each other’s designs, merge multiple designs, or otherwise manipulate the outputs. 

Computer-aided design is also being applied to engineer protein structures, which are crucial to many 
biological processes. Examples of key protein functions being pursued include folding into a desired structure, 
binding to another protein or to a small molecule, and catalyzing a chemical reaction. Researchers have already 
made significant progress toward the predictive design of protein structures and engineering existing peptides 
and proteins for new functionalities. Automated design tools could facilitate the pursuit of more complex protein 
engineering, such as designing a new protein or enzyme capable of functioning with a level of specificity similar 
to that of natural proteins. 


Bioprospecting and Pathway Design 

Software can also enable designers to search for existing enzymes or biochemical pathways that could be 
incorporated into genetic designs to produce chemicals of interest. This type of searching is known as in silico 
bioprospecting. Using this approach, researchers systematically screen a large body of DNA sequence data to 
identify genes or protein domains that encode enzymes capable of performing a desired chemical reaction. After 
identifying hundreds of candidate genes, researchers produce selected genes synthetically and test their functions 
in vitro or in vivo. Additional software tools can be used to engineer more complex biochemical pathways by 
helping the user visualize those pathways, including their connections to the larger metabolic network of the cell, 
and estimate how different factors affect the levels of the various compounds produced. In this way, simulation 
and modeling tools can help to identify where adjustments might be most impactful, such as by increasing the 
expression of one gene product or by deactivating or downregulating a gene involved in a competing pathway. 

Metabolic Engineering 

Metabolic engineering involves the manipulation of biochemical pathways within a cell, frequently with 
the objective of producing a desired chemical. The desired chemical may be new or one that the cell already 
makes, and it may be simple (e.g., ethanol) or more complex (e.g., polypeptide or polyketide antibiotics). Based 
on a detailed understanding of the network of biochemical reactions within the cell, researchers can identify the 
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genes involved in crucial steps in the network of biosynthetic pathways and then adjust them to improve yields. 
This process is rarely as simple as increasing the expression of all enzymes in the pathway, which can lead to 
overconsumption of cellular resources and harm the cell’s ability to grow and produce effectively. In addition, 
some intermediate chemical products of the pathway may be toxic to the cell, in which case it can be important to 
carefully regulate how rapidly such compounds are produced and consumed. Other pathways that compete with 
production of the final product may also need to be adjusted. Because biochemical pathways are often complex, 
engineering them frequently involves the use of sophisticated computer software. Metabolic engineering could 
potentially be used to produce toxins, narcotics, or other products relevant to biodefense. For example, yeast has 
already been engineered to produce opioids in minute quantities (Thodey et al., 2014). It is also conceivable that 
these techniques could be used to engineer organisms in the human microbiota to produce compounds that alter 
human health, perception, or behavior. 


Phenotype Engineering 

The phenotype of an organism can be affected by multiple genetic components. While there are some pheno¬ 
types for which it is possible to identify specific genes or circuits that would need to be added or altered in order 
to achieve a particular outcome, such as the capability for horizontal transfer (the movement of genes from one 
organism to another, as opposed to the vertical transfer of genes from parent to offspring) and transmissibility (the 
ability to pass from one organism to another), in many other cases it is difficult to determine the multiple genetic 
components that may impact phenotype. In the past, an organism’s phenotypes were manipulated largely by the 
accumulation of sequential mutations, which in many cases led to local rather than global optimizations of func¬ 
tion. More recently, the explosion of sequence information and accompanying systems biology characterizations 
of multiple organisms have provided a cornucopia of possibilities for engineering phenotypes that involve much 
more complex networks of genetic components. In parallel, the rise of DNA construction and genome editing 
technologies could facilitate the construction of multiple variants that involve alterations to multiple genes in an 
organism. By applying high-throughput screening or selection to these variant libraries, it may be possible to isolate 
pathogens with dramatically modified phenotypes relevant to their potential weaponization, such as environmental 
stability, resistance to desiccation, and ability to be mass produced and dispersed. 

Horizontal Transfer and Transmissibility 

The spread and impacts of a given pathogen are closely tied to its ability to replicate and be transmitted to 
naive hosts. Synthetic biology technologies could potentially be applied to make a pathogen’s genes more easily 
transmitted, such as by enabling or enhancing the horizontal transfer of genes. Genes, circuits, or episomes (pieces 
of genetic information that can replicate independently of the host) can already be engineered to be horizontally 
transferred by exploiting commonalities in replication and transformation machinery; for example, the introduction 
of invasin genes has been used to alter the host ranges of bacteria (Palumbo and Wang, 2006; Wollert et al., 2007). 
New research aims to combine multiple such techniques to create near-universal horizontal transfer vectors with 
expanded functionality; if successful, this work could broaden the potential areas of concern (Fischbach and Voigt, 
2010; Yaung et al., 2014). Combinatorial methods that are available via library synthesis and either high-throughput 
screening or directed evolution may also potentially be used to alter or expand horizontal transfer and transmis¬ 
sibility. Past research has demonstrated that even low-throughput directed evolution of functions can be used to 
enhance airborne transmission of H5N1 influenza virus between mammals (Herfst et al., 2012; Imai et al., 2012). 

Xenobiology 

A simple example is the engineered incorporation of a new amino acid (one not typically found in living cells) 
into a cell’s proteins. Recent research has demonstrated that it is possible to engineer cells to employ a genetic 
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thymine, cytosine, and guanine) into a cell’s DNA (Chen et al., 2016; Feldman et al., 2017). Such approaches could 
potentially be used to block infection by viruses or prevent undesired horizontal transfer of gene function. Cells 
with alternative DNA bases, codons, amino acids, or genetic codes may also be able to evade detection based on 
standard methods such as polymerase chain reaction (PCR), DNA sequencing, or antibody-based assays. 

Human Modulation 

While past considerations of biodefense concerns have largely been focused on pathogens, synthetic biology 
raises new possibilities for modifying a person’s physiology or environment in ways that may lead to dysfunc¬ 
tion, disease, or increased susceptibility to disease. For example, altering the makeup or functions of the gut 
microbiome could either enhance a person’s health or cause dysfunction. Modulation of the immune system—the 
body’s defense against pathogens—is another hypothetical possibility worthy of consideration, as is epigenetic 
modification (changes in how cells express genes but not changes to the DNA sequence itself). In short, there 
is now a large amount of information available about the human form that could potentially inform phenotype 
modulation in different ways. 


BUILD 

Technologies and applications most closely aligned with the Build phase of the DBT cycle are those that are 
used to physically create actual biological components. Synthetic biology is often pursued in an iterative fashion, 
blurring the lines among the Design, Build, and Test phases, and some technologies can play a role in multiple 
phases. Considered here are technological capabilities and advances related to specified changes and to the con¬ 
struction of libraries for high-throughput screening or directed evolution. 

Factors that may impact the level of concern related to Build capabilities include cost, time, and ease of access 
for DNA construction; the complexity of libraries that can be generated for directed evolution; and the difficul¬ 
ties inherent in rendering the DNA “operable” (i.e., the ability to create a synthetic DNA sequence that actually 
functions within a living system). 


DNA Construction 

DNA construction refers to technologies that can be used to produce a desired DNA molecule de novo. The 
general and overlapping terms “DNA synthesis” and “DNA assembly” are included in this category. Much of 
modern biotechnology depends on having DNA molecules of defined sequence; synthetic DNA has been used, for 
example, to advance understanding of the basic workings of the genetic code, to enable modern DNA sequenc¬ 
ing, and to develop and enable common use of PCR. In addition, gene editing technologies such as zinc finger 
nucleases, TALENs, and CRISPR/Cas9 each depend on some amount of synthetic DNA. Decreasing costs and 
increased production scales have made it far more feasible to use synthetic DNA for a variety of purposes. Before 
DNA construction technologies became available, the only way to obtain a particular DNA segment of interest 
was to find it in an organism. Now, nearly any DNA—whether natural or designed—can be obtained by simply 
ordering the sequence to be synthesized from one of many commercial suppliers or by making it on a laboratory 
DNA synthesizer. While DNA is the most common product of DNA construction technologies, these technologies 
can also be used to create synthetic RNA molecules and chemical modifications to DNA or RNA. 

This access is tremendously enabling for the many beneficial uses of biotechnology, but also has ramifica¬ 
tions for potential malicious use. For example, DNA construction could conceivably be leveraged to make toxins, 
enhance a pathogen, re-create a known pathogen, or even create an entirely new pathogen. Generally speaking, 
ready access to synthetic DNA allows designers to construct, test, and revise their designs more easily. Many 
DNA synthesis companies have agreed to screen orders in accordance with guidelines from the U.S. Department 
of Health and Human Services (HHS, 2015), although limitations of these guidelines have been described (Carter 
and Friedman, 2015). 

Factors that may impact the level of concern related to DNA construction capabilities include cost, time. 
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ease of access, and difficulty of rendering the DNA “operable.” The size of a segment of synthetic DNA (a DNA 
construct) is typically described in base pairs for double-stranded DNA and nucleotides for single-stranded DNA. 
DNA constructs can range from a few nucleotides to several thousand base pairs to entire genomes. Generally 
speaking, longer DNA constructs are more difficult to produce (or assemble) and using them requires additional 
laboratory skills compared to shorter constructs. The following examples describe potential uses of DNA construc¬ 
tion in ascending order of length and complexity. 


Oligonucleotides (Several to Hundreds of Nucleotides) 

In its most basic form, DNA construction produces oligonucleotides (oligos), single strands of user-defined 
sequence that can range in length from a few nucleotides to a few hundred. Oligos can be combined to construct 
longer DNA sequences. Oligos are extremely useful for a wide variety of research tasks that involve manipulat¬ 
ing and analyzing DNA, including sequencing and PCR, as well as site-directed mutagenesis and genome-scale 
gene editing (e.g., using multiplexed automated genome engineering, or MAGE; Gallagher et al., 2014). Although 
oligos are typically too short to form the types of protein-encoding genes necessary to support more complex 
biological functions, they can be used to encode regulatory regions (such as promoters or enhancers), certain 
short polypeptide-based toxins, transfer RNA, and guide RNA molecules such as those employed for gene editing. 


Genes (Hundreds to Thousands of Base Pairs) 

Most genes range from a few hundred to a few thousand base pairs in length. Synthetic genes are available 
commercially as either cloned DNA (in which the product is verified as correct and pure, and typically delivered 
as part of a general circular plasmid DNA vector) or uncloned linear fragments of DNA (which typically contain 
some amount of undesired mutations). Potential uses for synthetic genes are at least as diverse as the range of 
genetic functions found in nature. Genes could be used for a wide variety of malicious purposes, for example, to 
enhance the pathogenicity of an organism or to produce a toxin. 


Genetic Systems (Thousands to Hundreds of Thousands of Base Pairs) 

Genetic systems are groups of genes that work together to achieve a more complex function but fall short of 
supporting an entire cell. For example, genetic systems could be used to encode a biosynthetic pathway or to form 
engineered genetic circuits that combine operations such as sensing, computing, and actuation. Viral genomes can 
also be considered as genetic systems, and the genomes for several viruses have already been synthesized and used 
to produce fully infectious virions (Blight et al., 2000; Cello et al., 2002; Tumpey et al., 2005). Viral genomes can 
vary from thousands to hundreds of thousands of base pairs in length; large viral genomes (e.g., orthopox viruses) 
are currently more challenging to synthesize than small ones (e.g., polio). 


Cellular Genomes (Millions of Base Pairs) 

DNA construction can also be used to assemble the genome for an entire single-celled organism. In 2010, 
researchers synthesized and assembled the DNA genome of the bacterium Mycoplasma mycoides and used that 
genome to produce a self-replicating cell (Gibson et al., 2010). This was a difficult, time-consuming, and costly 
process. At about one million base pairs, the synthetic genome was also one of the smallest known in the microbial 
world. Nevertheless, this feat demonstrated that it is possible to re-create a living, reproducing organism based 
on its genetic data. In this case, researchers “booted” their synthetic genome by inserting it into the cell body of a 
closely related organism, leading to complete replacement of its natural genome with the synthetic one. It remains 
to be seen how generalizable this approach can be for larger microbial genomes and other types of cells. Other 
researchers are currently pursuing the construction of bacterial and yeast genomes ranging from 4 to 11 megabase 
pairs in length; these efforts also use an existing close relative, replacing or “patching” the natural genome with 
large fragments of the synthetic genome (Richardson et al., 2017). Concerns have been raised about the possibility 
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of using whole-genome construction to generate dangerous organisms that otherwise could not be obtained without 
attracting attention (or might not be obtainable at all). 

Editing of Genes or Genomes 

A variety of technologies allows the modification of specified bases or genes within a pathogen, vector, or host. 
Such technologies could potentially be utilized to imbue pathogens with new functions; for example, site-directed 
mutagenesis capabilities could allow the construction of viral variants with novel properties such as altered immu- 
nogenicity or species range. Examples include oligonucleotide-meditated mutagenesis, recombination-mediated 
genetic engineering (“recombineering”) and related techniques (Murphy and Campellone, 2003; Ejsmont et al., 
2011), CRISPR/Cas9-based genome editing approaches, and MAGE. Most significantly, newer gene editing 
platforms such as CRISPR/Cas9 enable the modification of a wide range of organisms. Both the ease with which 
pathogens can be modified and the types of possible phenotypes that could arise from such modifications would 
be relevant to an assessment of vulnerabilities related to gene or genome editing. 

In the past, genome engineering was a painstaking process that required individual genes to be modified 
serially. Now, however, multiple genes can potentially be modified in parallel and iteratively. For example, with 
MAGE, multiple synthetic oligos are created that differ from the existing host genome in at least one base pair. 
These synthetic oligos are then inserted into a population of cells, where they essentially overwrite the targeted 
portion of DNA in the cells. MAGE has been used to optimize metabolic pathways, turn off sets of genes, tune 
gene activity up or down, and engineer a microbial genome with an altered genetic code. 

While the biochemical mechanisms MAGE relies on are common throughout both simple and complex 
organisms, MAGE has primarily been demonstrated in Escherichia coli, and the work required to adapt MAGE 
to a new species may prove cumbersome. In contrast, genetic engineering and CRISPR/Cas9-based technologies 
may allow engineering in many new species, providing convenient paths to the further identification of altered 
phenotypes via either high-throughput screening or directed evolution of organisms with radically new phenotypes 
and genome-wide sequence changes. 


Library Construction 

One of the watershed differences that has been enabled by improvements in DNA construction is the abil¬ 
ity to generate large libraries of genetic variants. Such libraries can be sieved for improved phenotypes without 
knowing precisely what variants will arise. This contrasts with the more deliberate process of gene and genome 
engineering described above (Editing of Genes or Genomes), but there are overlaps between the two approaches 
because an increased knowledge of how genotype relates to phenotype can guide library design and thereby 
improve the probability that a given phenotype will be achieved. As an analogy, library construction techniques 
allow the construction of many more “darts,” and knowledge of genotype-to-phenotype relationships, gained 
through experiments with gene and genome editing, provides an increasingly larger “target” at which to throw 
those darts. In particular, the ability to construct degenerate oligonucleotides in a wide variety of ways, including 
by codon mutagenesis or with nucleotides that are inherently mutagenic, provides a means to construct both large 
and relatively targeted libraries. 

Because DNA can span thousands or even millions of base pairs, designers typically prioritize which parts 
to vary based on analyses and educated guesses about which changes are most likely to yield the desired results. 
For example, a designer may use protein structure analysis and visualization software to identify specific parts 
of a protein that might affect the desired function, such as its enzymatic specificity, build proteins with random 
variation in those specific parts, and then test how each random variation affects enzymatic specificity. 

Booting of Engineered Constructs 

With some exceptions, synthesized DNA (or RNA) does not perform biological functions on its own. The 
process of inducing raw genetic material to perform biological functions is known as “booting,” a term borrowed 
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from computer technology, where booting refers to the ability to execute functions on digital information by taking 
it out of storage and putting it into an active state. Booting a synthetic construct is most relevant to the Build and 
Test phases of the DBT cycle. In the context of biodefense, booting may also be important for a malicious actor’s 
ability to deliver a bioagent to a target. 

Booting in biological systems can take many forms. In the context of viruses, booting may be broadly con¬ 
sidered to mean that viral nucleic acids are delivered to cells, where the viral nucleic acids are subsequently able 
to replicate. A few viruses have been booted by merely delivering their genetic material into host cells, whereas 
others require additional genetic components expressed separately in host cells in order to produce infectious viral 
particles. In the context of bacteria, researchers have successfully booted synthetic bacterial genomes by replacing 
part or all of the genetic contents of natural or synthesized cells with a partial or full synthetic genome. Booting 
a fully functioning, self-replicating bacterium is significantly more complex than booting a virus. 

Perhaps the simplest example of booting engineered constructs is through the use of episomes, pieces of genetic 
information that can autonomously replicate but typically cannot be readily transferred between cells. Plasmids 
(typically found in prokaryotes) and extrachromosomal linear arrays of DNA (typically found in eukaryotes) are 
examples of episomes. Episomes are the most common vector that synthetic biologists use to boot engineered 
constructs, and there are many available techniques to boot episomes. Although episomes in general are not as 
complex as full viral or bacterial genomes, they can be used to, for example, introduce a viral genome into a cell 
and then use the host cell’s transcription, translation, and replication machinery to boot the virus. It may even be 
possible to use a similar approach to boot a free-living organism. It is also possible for some episomes to spread 
through a microbial population and between individuals, albeit in general more slowly than a viral infection would. 

TEST 

Testing is used to determine whether a design or biological product created with synthetic biology tools has 
the desired properties. Tests are typically performed at many stages of a project; for example, a researcher might 
use computer models to determine if a design is likely to work, then perform tests to validate that the correct 
DNA construct has been synthesized, then boot the construct to verify that it is capable of performing the intended 
biological functions. Testing might involve the use of cell cultures, model organisms in laboratory conditions, 
organisms in the wild, or even potentially human populations. 

Test results can be used to further refine a design based on information gained from experimental measure¬ 
ments and observations, and the DBT cycle begins again. In general, state-of-the-art synthetic biology efforts 
require a great deal of testing in order to yield organisms with the desired properties, making Test both a crucial 
step and a substantial bottleneck in the DBT cycle. It is a matter of debate whether malicious actors could skip 
the Test phase and still successfully carry out a biological attack. While a test can be applied to a single variant, 
in practice it is often more desirable to carry out multiple tests in parallel (high-throughput screening) or to have 
organisms “test” themselves (directed evolution). 

High-Throughput Screening 

Automation provides the means to screen thousands to billions of individual variants of an organism for func¬ 
tion or phenotype. High-throughput testing in cell cultures is a type of screening test commonly used in synthetic 
biology. Such tests can be used to answer more specific questions (e.g., did this precise genomic change yield the 
desired phenotypic alteration?) or more exploratory questions (e.g., did any of these 100,000 combinatorial variants 
in one viral protein yield the desired phenotypic alteration?). Technologies for cheaper and faster screening are 
in high demand across the biological and biomedical communities, in particular for “-omics” approaches that are 
agnostic to the type of organism being tested, such as genomics, transcriptomics, metabolomics, and proteomics. 

Screening-based tests are performed serially, evaluating different designs or biological products one at a time. 
Using multiplexing and automation, researchers have developed high-throughput screening-based tests capable of 
screening tens to thousands of prototypes. On the other hand, selection-based tests (see below, Directed Evolution) 
are more difficult to design than screening-based tests, but allow much higher throughput. 
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Directed Evolution 

In nature, the process of evolution selects the best performers from a genetic pool that includes some degree 
of random variation. Researchers can use a similar process to create prototype biological components represent¬ 
ing multiple competing variations and then select among them for the phenotypes that best match the desired 
outcomes. Prototypes can vary based on smaller changes—different DNA bases, codons, or amino acids, for 
example—or based on larger-scale differences such as the configuration of multiple genes within a genetic circuit. 
Like automated biological design, directed evolution is a synthetic biology technique that spans all three phases 
of the DBT cycle. By building and evolving constructs with random variations, researchers use directed evolution 
to refine new designs through an iterative approach. The primary difference between high-throughput screening 
and directed evolution is that in directed evolution, individual organisms compete for the ability to replicate. For 
example, genomic variations could be introduced into a modified pathogen to produce a large library of variant 
organisms, which could then be tested for the ability to grow in the presence of an antibiotic. Directed evolution 
can thus be used to evaluate millions of prototype biological components in parallel, though typically, only one 
or a few variants would ultimately emerge as successful. 

This approach can allow a researcher to sidestep the need for predictive design by creating libraries of mil¬ 
lions or more variants and then selecting or screening them to find those few that have a desired set of properties. 
For example, a researcher could randomly alter residues within specific genes or across an entire genome and 
then select for a desired phenotype, such as growth, tropism, or lysis. Importantly, the selection can be carried 
out directly in a host organism, thus allowing for the selection of host-related phenotypes, such as transmissibility 
(ability to move from an infected to an uninfected host) or pathogenicity (e.g., necrosis within particular tissues). 
The most promising variants that emerge can be refined further through additional iterations of rational design or 
selection, following the DBT cycle. Many of the same methods used for library construction and high-throughput 
screening can also be used for directed evolution, and these different approaches can be combined. For example, 
a researcher could conduct a high-throughput screen of variants created by a CRISPR/Cas9 library, MAGE, or 
DNA shuffling (a technique whereby a set of related genes or genomes is broken down into smaller pieces that 
are randomly reassembled). The variants selected by the screen could then be selected for growth on a novel 
substrate, potentially identifying both a gene and an organism whose sequence was not fully included in any of 
the original precursor genes. 
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Selected Prior Analyses Used to Inform the Framework 


Prior biodefense analyses and other sources were reviewed in developing the factors and elements that form 
the framework presented in this report. This appendix provides further summary information about several of these 
sources to illustrate different approaches to assessing potential synthetic biology concerns. It is not intended to be 
a comprehensive compendium of all prior risk governance and biotechnology assessment approaches. 


CONSIDERATIONS FROM GLOBALIZATION, BIOSECURITY, 

AND THE FUTURE OF THE LIFE SCIENCES 

The report Globalization, Biosecurity, and the Future of the Life Sciences (also sometimes referred to as the 
“Lemon-Relman” report from the names of its committee co-chairs) classified emerging technologies into cat¬ 
egories based on their characteristics as concerning and warranting particular attention for further risk assessment 
(IOM and NRC, 2006). These four groupings were: 

(1) technologies that seek to acquire novel biological or molecular diversity; (2) technologies that seek to generate 
novel but pre-determined and specific biological or molecular entities through directed design; (3) technologies 
that seek to understand and manipulate biological systems in a more comprehensive and effective manner; and (4) 
technologies that seek to enhance production, delivery, and ‘packaging’ of biologically active materials. (IOM and 
NRC, 2006, p. 4) 

This categorization is wholly focused on features of the technology itself in terms of capabilities it might 
generate. 


CAPABILITIES -BASED WEAPON DEVELOPMENT FRAMEWORK 
FROM NATIONAL DEFENSE UNIVERSITY 

This approach, developed at National Defense University (2016) indicates the points at which potential impacts 
in the age of synthetic biology could be achieved. Beginning at the far left and working across each step of the 
bioweapon development pathway, one may determine the steps at which synthetic biology could have an impact 
on the development pathway (see Figure B-l). 
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Identification 
of specific 
characteristic 


Creation 
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Creation 


Targeting 


Modification 


Targeting 


Cellular & 
nuclear 
delivery 


Testing 


Cellular & 
Nuclear 
delivery 


Testing 


Scale up 


Testing 


Dissemination 


Scale up 


Dissemination 


Scale up 


Dissemination 


Acquisition = theft from lab or transport, harvest from nature, synthetic recreation 
Creation = wet-bench laboratory work and genetic design, synthetic creation 
Targeting = target to specific genome elements 

Cellular/Nuclear delivery = capability which allows viable delivery to specific cells and the nucleus 
Testing = animal models, field testing 

Scale up = mass production, freeze drying, encapsulation, storage/stockpiling 
Dissemination = sprayer, point delivery mechanism, filling 


For each capability listed, address the following questions 

How do advances in synthetic biology enable this capability ? 

What barriers must be overcome? 

How soon will this capability emerge? (current, near, mid, long) 

What actors could develop this capability? 

What are the consequences of the emergence of this capability? 

FIGURE B-l Approach to considering steps where synthetic biology could impact bioweapon development. Developed by 
National Defense University. SOURCE: National Defense University, 2016. 


This model was used by National Defense University at a tabletop exercise to assess where gene editing 
technology (such as CRISPR/Cas) provides heightened capability for creating bioweapons. The approach pro¬ 
vides insight into where synthetic biology may have an impact, rather than defining specific characteristics of the 
technologies themselves. 

DECISION FRAMEWORK FROM INNOVATION, DUAL USE, AND SECURITY 

Jonathan Tucker’s “Decision Framework” published in Innovation, Dual Use, and Security (Tucker, 2012) 
suggests a number of attributes that are relevant to the study charge, as restated below: 

(1) Characteristics of the technology: 

a. Accessibility 

b. Ease of misuse 

(2) Characteristics of governability: 

a. Embodiment (material “tangibility” of technologies) 

b. Maturity 

c. Convergence (number of technologies that come together to create new technology) 

d. Rate of advance 

e. International diffusion 

(3) Level(s) amenable to mitigation 

a. State 

b. Institution 

c. Individual 

d. Product 

e. Knowledge 
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This framework encompasses a variety of features that touch on features of the technology (level of difficulty, 
maturity, speed of advance, and convergence with other technologies), who has access, and the severity of the 
outcome if it is misused. This framework also considers options for mitigation, as well as how the cost compares 
to the benefit of the technology. It is used primarily to assess technology in terms of relative risk on these levels. 

EXPERIMENTAL AIMS FROM BIOTECHNOLOGY RESEARCH IN AN AGE OF TERRORISM 

In 2004, the National Academies produced the report Biotechnology Research in an Age of Terrorism (NRC, 
2004), known as the “Fink report” after its chairman, geneticist Gerald R. Fink, which made the case that scientists 
have an “affirmative moral duty to avoid contributing to the advancement of biowarfare or bioterrorism.” The 
Fink report highlights a list of specific experimental aims that that should trigger additional safety and security 
examination, even if performed for valid scientific reasons. These include experiments that would 

(1) Render a vaccine ineffective, 

(2) Confer resistance to antibiotics or antivirals (countermeasures), 

(3) Enhance virulence of a pathogen or make a nonpathogen virulent, 

(4) Increase transmissibility of a pathogen, 

(5) Alter the host range of a pathogen, 

(6) Enable evasion of detection or diagnostic, or 

(7) Enable weaponization of an agent or toxin. 

The report features broad recommendations for mitigation of negative outcomes, to include community out¬ 
reach, research review (including creation and use of a review board), focused research on mitigation, and inter¬ 
national cooperation and outreach. This framework primarily focused on the creation of mitigation tools, but also 
the creation of a core backbone for biosecurity policy development. The Fink report also led to the creation of the 
National Science Advisory Board for Biosecurity, a federal advisory committee administered by the U.S. Depart¬ 
ment of Health and Human Services, which has produced a number of influential reports on dual-use research. 

NATIONAL INSTITUTES OF HEALTH CONTAINMENT GUIDELINES 

The National Institutes of Health Guidelines (NIH, 2016), conceived initially with the advent of recombinant 
DNA, provide risk assessment frameworks that enable decision making about the level of biocontainment that can 
best protect laboratory workers, along with suggestions for mitigation plans. Formal risk groups were developed 
with respect to particular pathogens. 

These guidelines focus on capabilities of particular agents, potential adverse outcomes (accidental infection 
of laboratory workers or the public), and mitigation strategies. Perhaps most relevant to this study are the charac¬ 
teristics identified for consideration with respect to containment, which include 

Virulence; 

Pathogenicity; 

Potency; 

Environmental stability; 

Route of spread/communicability; 

Availability of vaccine or treatment; 

Gene product effects such as toxicity, physiological activity, and allergenicity; and 

Any strain that is known to be more hazardous than the parent (wild-type) strain. 
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CATEGORIES OF EXPERIMENTS HIGHLIGHTED BY THE DURC PROCESS 

The Dual Use Research of Concern (DURC) process was initially triggered by concerns over the publication 
of sequence manipulation information that could map out the creation of a potentially dangerous virus; however, 
the DURC policies that resulted are more focused on experiments of concern rather than control of information 
per se. The DURC policies for government and institutions (U.S. Government, 2012, 2014) utilize the Federal 
Select Agent Program Select Agents and Toxins list and highlight categories of experiments similar to those in 
the Fink report. These categories include experiments that 

(1) Enhance the harmful consequences of the agent or toxin; 

(2) Disrupt immunity or the effectiveness of an immunization against the agent or toxin without clinical and/ 
or agricultural justification; 

(3) Confer to the agent or toxin resistance to clinically and/or agriculturally useful prophylactic or therapeutic 
interventions against that agent or toxin or facilitates their ability to evade detection methodologies; 

(4) Increase the stability, transmissibility, or the ability to disseminate the agent or toxin; 

(5) Alter the host range or tropism of the agent or toxin; 

(6) Enhance the susceptibility of a host population to the agent or toxin; or 

(7) Generate or reconstitute an eradicated or extinct agent or toxin listed. 

Similar to the Fink report, this list is focused on capabilities that the technology provides to produce a harmful 
biological entity. The DURC policy is intended to be used to make decisions about funding dual-use experiments. 

SOCIETAL RISK EVALUATION SCHEME (SRES) 

The SRES approach developed by Cummings and Kuzma (2017) was applied to a set of four case studies of 
synthetic biology applications. The suggested characteristics for assessing risks of synthetic biology applications 
are based primarily on outcomes of an adverse event and whether or not mitigation exists. It also includes a novel 
consideration of society’s attitude toward a potentially adverse outcome, which include considerations such as 

(1) Human health risks, 

(2) Environmental health risks, 

(3) Unmanageability, 

(4) Irreversibility, 

(5) Likelihood that a technology will enter the marketplace, 

(6) Lack of human health benefits, 

(7) Lack of environmental benefits, and 

(8) Anticipated level of public concern. 

Since this approach was a risk-benefit framework, it goes beyond the scope of the study charge for this com¬ 
mittee, which did not attempt to address the benefits of synthetic biology capabilities. 

GRYPHON ANALYSES 

In a presentation to the committee, a representative from Gryphon Scientific described an approach for con¬ 
sidering how advances in synthetic biology may change the landscape for acquisition of biological threat agents. 
For example, synthetic biology advances might enable particular threat agents to be synthesized or for a less 
pathogenic microorganism to be modified into a threat agent, in comparison to alternative acquisition routes such 
as culturing from clinical or environmental samples or theft. The approach taken by the analysis was comparative 
and was motivated by the guiding question, “What advantages (or disadvantages) do synthetic biology acquisi¬ 
tion routes provide to a malicious actor, relative to alternative acquisition routes?” (Casagrande et al., 2017). The 
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PHASE 1: Is creating the agent 
using existing synbio techniques 
feasible? 


YES 


agent using synbio techniques 
provide any advantages over 
alternative means of acquisition, 
given: 

(a) the technical challenges of 
each approach and (b) control 
measures? 


NO 

Agent does not pose a near-term svnbio 

threat: 

Creation of the agent using synbio 
techniques is infeasible or provides no 
advantages over alternative means of 
acquisition 

1 


4 




NO 

Agent poses a near-term svnbio threat: 

Creation of the agent using synbio 
techniques is feasible and provides at 
least some advantages over alternative 
means of acquisition 

YES 


FIGURE B-2 Approach to conducting an assessment of how synthetic biology changes the threat agent landscape. SOURCE: 
Modified from Casagrande et al., 2017. 


framework used in the analysis, depicted in Figure B-2, included two phases. The first phase asked whether creating 
a particular biological threat agent was possible using synthetic biology. If so, the second phase asked whether the 
use of synthetic biology provided acquisition advantages over alternative approaches to obtaining that agent. The 
results of these two phases informed the determination of whether the agent did or did not pose a near-term threat. 

Prior work by Gryphon Scientific, described in the presentation, also considered whether novel biotechnolo¬ 
gies, including synthetic biology, have the potential to influence and streamline classical weaponization steps 
for biological agents. For example, the presenter noted that agents developed using synthetic biology might be 
developed with increased potency, increased ability to grow to larger numbers, enhanced environmental persis¬ 
tence, increased transmissibility, and the ability to overcome host resistance. However, the use of synthetic biol¬ 
ogy tools might not be the most effective means to achieve these objectives because of intrinsic factors (such as 
a lack of knowledge) as well as extrinsic factors such as the need for continual testing of weapons products along 
a development pathway. 
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Questions to Stimulate Consideration 
of Framework Factors 


The following illustrative questions were developed to stimulate consideration of the framework factors and 
facilitate use of the framework to assess specific potential capabilities. These are not intended to represent every 
question that can be posed, and some questions can be applicable to assessing more than one factor. 

Usability of the Technology—Ease of Use 

• How long is the oligonucleotide, gene, or genome involved? 

• If an entire genome is being created, how easy is it to assemble? 

• For an entire genome, how easy is it to “boot”? 

• What is the scale and complexity of modification or synthesis involved? For example, is the target a virus, 
bacterium, fungus, or a larger organism, and how does this affect the ease of use? 

• Can the desired construct be ordered commercially, or would regulatory oversight (e.g.. Select Agent rules) 
or construct length make this unlikely? 

• Are reagent kits available to make the process easier? 

• Are genomic design tools and relevant “parts” databases available to help achieve desired goals? 

• How reliable is the available genomic sequence information? 

• How reliable is the available genotype-to-phenotype information, and how does this affect the ease of use 
for the intended purpose? 

• Is there a recipe or standard operating procedure available for the intended use, and if so, has it been 
demonstrated to work previously? 

• Is specialized equipment required, and if so, is it readily available for purchase or via contract? 

• What level of specialized knowledge, hands-on training, and tacit knowledge is required? 

• Are suitable test conditions (e.g., cell cultures, model organisms) available? 

Usability of the Technology—Rate of Development 

• Are significant improvements to the technology being published on at least an annual basis? 

• What aspects are improving? (Examples of aspects to consider include total processing time, cost, laboratory 
space footprint, level of automation, accuracy, throughput, user interface, and output reporting.) 
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• What types of uses are driving commercial development and market adoption? 

• Is there competition spurring the rate of the technology’s development, or does one company have a 
monopoly? 

• Are there multiple different markets for the technology, spurring technological development and innovation, 
or is it tightly focused on one specific market? 

• Is there an open-source user community helping to drive the technology forward by sharing new developments? 

Usability of the Technology—Barriers to Use 

• Are there critical bottlenecks that, once overcome, will significantly improve ease of use (e.g., CRISPR/ 
Cas9 for gene editing, photolithography for oligonucleotide synthesis)? 

• What barriers may hinder wider market adoption and penetration of the technology involved, and how 
might these be overcome? 

• Would significant improvements in Build capabilities (e.g., capacity for increased construct length or 
reduced cost of synthesis) be accompanied by corresponding improvements in capabilities for Design and 
Testing relevant to the intended application, or would those aspects remain as barriers? 

• Are there gaps in fundamental knowledge about pathways and genotype-to-phenotype relationships that 
may hamper the use of genomic design tools for the intended use? 

Usability as a Weapon—Production and Delivery 

• Could synthetic biology (or its use in combination with other biotechnology advances) be used to enhance 
replication or growth characteristics of an agent in order to support scale-up? 

• Could synthetic biology (or its use in combination with other biotechnology advances) help to scale up 
production of the agent without its losing infectivity or other key features? 

• Could synthetic biology be used to make an agent “hardier” in the varied environments it may encounter 
during storage and delivery (e.g., could it survive the adverse conditions that might be expected in the 
context of dispersal)? 

• Could synthetic biology be used to stabilize the agent or facilitate dispersal and survival? 

• How might the agent be delivered to those targeted (e.g., mass dispersal, contamination of food or water, 
a needlestick), and how might this delivery mechanism affect requirements for production, stabilization, 
or testing? 

• Could synthetic biology (or its use in combination with other biotechnology advances) facilitate novel or 
enhanced forms of delivery? 

• Is large-scale production of the agent needed to have an impact? 

• Could synthetic biology help to reduce the organizational footprint, expertise, or equipment required for 
production? 


Usability as a Weapon—Scope of Casualty 

• Could synthetic biology be used to enhance host susceptibility to a given agent in a way that would worsen 
the severity of an attack or increase the number of casualties? 

• How many individuals could be targeted for harm using this capability (ranging from a single assassination 
to thousands of people, or more)? 

• Is the agent highly transmissible, thus allowing it to spread beyond those affected by the initial attack? 

• Would an attack based on this capability be expected to be lethal or incapacitating? 

• Could an attack based on this capability have psychological effects or affect the functioning of the targeted 
group? For example, could it incite fear, create panic, and/or allow the takeover of a particular region or 
infrastructure? 

• What might the duration of the impact be? 
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• In what environment(s) might the agent be used? 

• Could the agent become established in domestic animals or agricultural livestock (e.g., plague in cats) or 
wildlife, causing longer-term effects on humans and requiring difficult and costly eradication? 

Usability as a Weapon—Predictability of Results 

• Does the agent need to be tested extensively to confirm that it is efficacious? 

• Is there a relevant animal model for the agent? How predictable is that model for human infection by the 
same agent? 

• What is the fidelity of the technology? How reproducibly can a particular result be obtained? 

• Are there known engineering strategies or preexisting research outlining methods to predictably produce 
the desired result? Can the properties of a bioagent be modeled with computational tools? 

• Is there knowledge regarding the evolutionary stability of an engineered pathogen or pathway? For example, 
is it likely a synthetic construct will mutate to increase or decrease functionality or activity? Or can slow- 
evolving pathogens be generated to avoid attenuation? 

Requirements of Actors—Access to Expertise 

• How common and widespread is the technical expertise needed to exploit the necessary technology, and 
could expertise in another, related area suffice? 

• Would expertise in more than one area be required to pursue the capability, and would the range of 
technological expertise likely require a group of people to provide the expertise? 

• Would developing this capability require or be enhanced by interaction with the legitimate research 
community, or could it be performed autonomously? 

Requirements of Actors—Access to Resources 

• What are the equipment costs, and how quickly are equipment costs decreasing? 

• Are cheaper versions of the necessary technology becoming available, and are they robust enough to raise 
concerns? 

• Can reagents be acquired from multiple vendors, or is there a secondary market (e.g., eBay) where the 
equipment can be acquired at a lower cost? 

• What are the material or reagent costs? 

• What is the shelf life of the required reagents? 

• What are the labor costs? Is specialized training required, and if so, what are the costs involved in that 
training? 

• What are the maintenance or service costs, and how frequently is maintenance or service needed? 

• What facility costs are associated with the necessary technology (e.g., special plumbing, cooling, airflow, 
filtration, vibration isolation)? 

• What is the biosafety risk to the actor, and what costs might the actor incur to protect the safety of those 
doing the work? 

• What would it cost to conceal the pursuit of this capability from authorities (or other nations)? 

Requirements of Actors—Organizational Footprint Requirements 

• What is the organizational footprint (e.g., equipment and other laboratory infrastructure, personnel) needed 
to utilize the necessary technology? 

• Is the infrastructure required to use this technology widespread or rare? 

• Could existing organizations or infrastructure be leveraged to develop this capability (e.g., dual use of 
legitimate biotechnology infrastructure), or would the work require a secret facility with a particular set of 
infrastructure requirements? 
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• If additional infrastructure would be required for malicious use, would it require an incremental increase 
in capacity or major additions? 

Potential for Mitigation—Deterrence and Prevention Capabilities 

• Can the development of this capability be controlled or prevented through regulation or other means, either 
in the United States or internationally? Do nations have agreements relevant to applicable regulations? 

• Is the necessary technology geographically centralized or widely distributed? 

Potential for Mitigation—Capability to Recognize an Attack 

• To what degree can beneficial and malicious use of the technology involved in this capability be distinguished? 

• Are there particular activities or equipment associated with this technology that may indicate when it is 
being used to prepare for an attack? 

• Could the capability be used to engineer an agent that evades typical disease surveillance methodologies 
(e.g., to cause an unusual constellation of symptoms)? 

• Could the capability be used to engineer an agent that evades typical identification and characterization 
methodologies (e.g., to create an agent that lacks the phenotypes or DNA sequence used for laboratory 
identification)? 

• Would it be possible to assess whether the agent was created synthetically, as opposed to emerging 
naturally? 

• Could the capability enable targeting of particular subpopulations, and if so, could this targeting be detected 
with available disease surveillance mechanisms? 

• Could environmental surveillance (e.g., direct sensing via Bio Watch or similar approaches, animal sentinels, 
sensing without direct contact [standoff detection]) provide earlier warning of a bioweapon attack than 
waiting for ill individuals to present in the public health system? 

• Can mining social media in real time provide indications of when and where an attack or outbreak based 
on this capability might take place, compared to traditional public health surveillance mechanisms? 

Potential for Mitigation—Attribution Capabilities 

• How feasible would it be to use DNA sequencing to compare samples of the agent with samples from 
recovered evidence? 

• Would the technique used to construct or modify the agent leave a genomic “scar” that could potentially 
be used as evidence? 

• Would it be possible to identify a design “signature” linking the use of this technology with a given group 
or laboratory? 

• Would the development of this capability be associated with certain physical properties that could be used 
to compare samples of the agent with samples from recovered evidence? 

Potential for Mitigation—Consequence Management Capabilities 

• Will existing civilian and military public health infrastructure and mitigation approaches to minimize 
morbidity and mortality be effective against an attack using this capability? 

• Are there currently effective medical countermeasures available for an attack using this capability, or would 
it be possible to quickly develop vaccines, drugs, or antitoxins to mitigate the spread and impact of the 
agent over the longer term? 

• Would the effectiveness of those mitigation approaches rely on knowing how an agent was created? 

• Would it be possible to understand the genotype, phenotype, or chemical composition of the agent to inform 
how its effect can be mitigated? 
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Committee Biographies 


Michael Imperiale, (Chair), Ph.D., is the Arthur F. Thurnau Professor and Associate Chair of Microbiology and 
Immunology at the University of Michigan Medical School. Dr. Imperiale’s research focuses on the molecular 
biology of the small DNA tumor virus BK polyomavirus and specifically on how the virus traffics through the cell 
and interacts with the host intrinsic immune functions. Dr. Imperiale is a previous member of the National Science 
Advisory Board for Biosecurity and has been deeply involved in the policy discussion regarding the potential 
risks and benefits of gain-of-function research. In 2010, he was elected as a Fellow of the American Academy 
of Microbiology and was named a Fellow of the American Association for the Advancement of Science in 2011. 
He is the founding editor-in-chief of mSphere and also serves as an editor for mBio. In addition to his laboratory 
research, Dr. Imperiale is involved in science policy. He serves on the Committee on Science, Technology, and 
Law at the National Academies of Sciences, Engineering, and Medicine and previously served on the Planetary 
Protection Subcommittee at NASA. Dr. Imperiale received his B.A., M.A., and Ph.D. from Columbia University, 
all in biological sciences. 

Patrick Boyle, Ph.D., is the head of design at Ginkgo Bio works, a Boston-based synthetic biology company that 
makes and sells engineered organisms. Dr. Boyle’s team provides design tools and synthetic biology expertise 
to Ginkgo’s organism engineers and is an integral part of Ginkgo’s Design, Build, Test, and Ferment strategy for 
organism engineering. Dr. Boyle has extensive hands-on experience with the day-to-day applications of synthetic 
biology, as well as with working within the existing regulatory structure surrounding synthetic biology. Dr. Boyle 
received his Ph.D. in biological and biomedical sciences from Harvard Medical School. 

Peter A. Carr, Ph.D., is a senior scientist at the Massachusetts Institute of Technology’s Lincoln Laboratory, where 
he leads the synthetic biology research program. His research interests span genome engineering, rapid prototyping 
of both hardware and wetware, DNA synthesis and error correction, risk evaluation, and biodefense. Dr. Carr is 
the director of judging for the International Genetically Engineered Machine (iGEM) competition and is deeply 
knowledgeable about both the practice and potential implications of synthetic biology, with a special focus on the 
potential impacts on biodefense. Dr. Carr received his bachelor’s degree in biochemistry from Harvard and his 
Ph.D. in biochemistry and molecular biophysics from Columbia University. 
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Douglas Densmore, Ph.D., is associate professor in the Department of Electrical and Computer Engineering and 
a Hariri Institute for Computing and Computational Science and Engineering Faculty Fellow, both at Boston Uni¬ 
versity. His research focuses on the development of tools for the specification, design, and assembly of synthetic 
biological systems, drawing upon his experience with embedded system-level design and electronic design auto¬ 
mation. He is the director of the Cross-disciplinary Integration of Design Automation Research group at Boston 
University, where his team of staff and postdoctoral researchers, undergraduate interns, and graduate students 
develops computational and experimental tools for synthetic biology. He is the lead investigator for the National 
Science Foundation Expeditions “Living Computing Project” and a senior member of the Institute of Electrical 
and Electronics Engineers and the Association for Computing Machinery. Dr. Densmore received his Ph.D. in 
electrical engineering from the University of California, Berkeley. 

Diane DiEuliis, Ph.D., is a senior research fellow at National Defense University (NDU). Her research areas focus 
on emerging biological technologies, biodefense, and preparedness for biological threats. Dr. DiEuliis also studies 
issues related to dual-use research, disaster recovery research, and behavioral, cognitive, and social science as it 
relates to important aspects of deterrence and preparedness. Prior to joining NDU, Dr. DiEuliis was the deputy 
director for policy in the Office of the Assistant Secretary for Preparedness and Response, U.S. Department of 
Health and Human Services. Dr. DiEuliis also previously served in the Office of Science and Technology Policy 
at the White House and was a program director at the National Institutes of Health. Dr. DiEuliis has broad knowl¬ 
edge about the policy implications of emerging technologies, as well as the intricacies that accompany instituting 
new policies to regulate such emerging technologies. Dr. DiEuliis received her Ph.D. in biological sciences from 
the University of Delaware. 

Andrew Ellington, Ph.D., is the Fraser Professor of Biochemistry at the University of Texas at Austin. Dr. Elling¬ 
ton’s research focuses on the development and evolution of artificial life, including nucleic acid operating systems 
that can function both in vitro and in vivo. His laboratory aims to “[reduce] synthetic biology ... to an engineering 
discipline rather than a buzzword.” Dr. Ellington has received the Office of Naval Research Young Investigator 
Award, Cottrell Award, and Pew Scholar Award. He has advised numerous government agencies on biodefense 
and biotechnology issues and was recently named a National Security Science and Engineering Faculty Fellow. 
He was also recently named a Fellow of the American Academy of Microbiology and of the American Association 
for the Advancement of Science. Dr. Ellington has also helped found the aptamer companies Archemix and b3 
Biosciences, and has an intimate understanding of both the academic and commercial sides of synthetic biology, as 
well as the challenges to both. Dr. Ellington earned his Ph.D. in biochemistry and molecular biology from Harvard. 

Gigi Kwik Gronvall, Ph.D., is a senior associate at the Johns Hopkins Center for Health Security and visiting 
faculty at the Johns Hopkins Bloomberg School of Public Health. An immunologist by training, Dr. Gronvall’s 
work addresses how scientists can diminish the threat of biological weapons and how they can contribute to an 
effective response against a biological weapon or a natural epidemic. Dr. Gronvall is the author of the 2016 book 
Synthetic Biology: Safety, Security, and Promise (Health Security Press). She is a member of the Threat Reduction 
Advisory Committee, which provides the Secretary of Defense with independent advice and recommendations on 
reducing the risk to the United States, its military forces, and its allies and partners posed by nuclear, biological, 
chemical, and conventional threats. Dr. Gronvall has testified before Congress on topics relating to biosafety and 
biosecurity and is widely regarded as an expert on the role of scientists in health and national security matters. 
Dr. Gronvall earned her Ph.D. from Johns Hopkins University. 

Charles Haas, Ph.D., is the L.D. Betz Professor of Environmental Engineering and head of the Department of 
Civil, Architectural, and Environmental Engineering at Drexel University. His broad research interests include the 
estimation of human health risks from environmental exposures to pathogens and their control using engineering 
interventions and drinking water treatment. Dr. Haas is broadly knowledgeable in the field of risk assessment, 
particularly in the context of complex and interdependent systems. Dr. Haas previously served as co-director 
of the Center for Advancing Microbial Risk Assessment, which was jointly funded by the U.S. Department of 
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Homeland Security and the U.S. Environmental Protection Agency. Dr. Haas has served on a number of National 
Academies committees, including serving as chair of the Committee to Review Risk Assessment Approaches for 
the Medical Countermeasures Test and Evaluation Facility at Fort Detrick, Maryland. Dr. Haas received his Ph.D. 
in environmental engineering from the University of Illinois at Urbana-Champaign. 

Joseph Kanabrocki, Ph.D., is the associate vice president for research safety and professor of microbiology in the 
Biological Sciences Division of the University of Chicago. Dr. Kanabrocki is tasked with instilling a culture that 
focuses on the health and well-being of all university personnel engaged in research activities. Dr. Kanabrocki is 
an expert in biosafety and biosecurity issues, especially practical ones arising from day-to-day laboratory work due 
to his appointment as biological safety officer and select agent responsible official for the University of Chicago. 
Dr. Kanabrocki is a member of the National Institutes of Health Recombinant DNA Advisory Committee and 
currently a member of the National Science Advisory Board for Biosecurity (NSABB). Dr. Kanabrocki served as 
co-chair of the NSABB Working Group that produced the 2016 report Recommendations for the Evaluation and 
Oversight of Proposed Gain-of-Function Research. Dr. Kanabrocki received his Ph.D. in microbiology from the 
University of South Dakota School of Medicine. 

Kara Morgan, Ph.D., is a principal at Quant Policy Strategies, LLC. Her work in public health policy analysis 
includes developing and evaluating data-driven decision support tools to support effective risk management deci¬ 
sion making. She has worked extensively on risk assessment and, in particular, on how results from risk assess¬ 
ments can be effectively integrated into decision-making processes. Prior to founding Quant Policy Strategies, 
Dr. Morgan was a research leader at Battelle Memorial Institute. Prior to that position. Dr. Morgan worked at the 
U.S. Food and Drug Administration (FDA) in several advisory and leadership positions for 10 years. Through her 
work supporting the National Nanotechnology Initiative during her time at FDA, in 2005 she published one of 
the first articles to establish a framework for informing risk analysis about nanoparticles. Her research in expert 
elicitation, decision analysis, and risk analysis has led to numerous publications developing and applying risk 
frameworks to decision making about microbial food safety and the pharmaceutical manufacturing quality. She 
is an adjunct professor at the John Glenn College for Public Affairs at Ohio State University and serves as an 
appointed member of the State Board of Education in Ohio. Dr. Morgan received her Ph.D. in engineering and 
public policy from Carnegie Mellon University. 

Kristala Jones Prather, Ph.D., is the Arthur D. Fittle Professor of Chemical Engineering at the Massachusetts 
Institute of Technology (MIT). Her research interests are centered on the engineering of recombinant microorgan¬ 
isms for the production of small molecules, especially focusing on the design and assembly of biological pathways 
to target compounds and the incorporation of novel control strategies for regulation of metabolism. Prior to joining 
MIT’s faculty, Dr. Prather worked in Bioprocess Research and Development at Merck Research Faboratories. She 
has received numerous awards, including a position on the MIT Technology Review’s TR35, a list of innovators 
under the age of 35; the National Science Foundation’s Faculty Early Career Development (CAREER) award; and 
the Biochemical Engineering Journal Young Investigator Award. Dr. Prather has been recognized for excellence 
in teaching at MIT with several awards, including the School of Engineering’s Junior Bose Award for Excellence 
in Teaching, and through appointment as a Mac Vicar Faculty Fellow, the highest honor given for undergraduate 
teaching at MIT. Dr. Prather received her Ph.D. from the University of California, Berkeley. 

Thomas Slezak, M.S., is an associate program leader at Fawrence Fivermore National Faboratory. Mr. Slezak 
is a computer scientist and manages a team of biologists and software engineers to find innovative solutions for 
diagnosing and characterizing dangerous pathogens. Mr. Slezak’s team has developed PCR assays, pan-microbial 
microarrays (recently commercialized by Affymetrix), and DNA sequence analysis software to support a broad 
range of pathogen detection and forensic programs in biodefense and human and animal health. Mr. Slezak co¬ 
chaired a Blue Ribbon Panel on bioinformatics for the U.S. Centers for Disease Control and Prevention that led 
to new funding for the Advanced Molecular Detection program, and was a developer of the nationwide BioWatch 
system. Mr. Slezak has served on three National Academies’ panels on biodefense topics, as well as on the National 
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Academies’ Standing Committee on Biodefense Programs to Advise the Department of Defense. Mr. Slezak 
received his M.S. in computer science at the University of California, Davis. 

Jill Taylor, Ph.D., is the director of the New York State Department of Health Wadsworth Center and a faculty 
member of the Wadsworth School of Laboratory Sciences. The Wadsworth Center is the only research-intensive 
public health laboratory in the nation, and Dr. Taylor has served as its director, deputy director, and interim direc¬ 
tor for the past 12 years. Dr. Taylor previously served as the director of the Wadsworth Center’s Clinical Virology 
Program, which focused on introducing molecular technologies to ensure responsiveness to the state’s changing 
public health needs, with particular emphasis on influenza virus. She also contributes to policy discussions at the 
national level as a member of the Board of Scientific Counselors of the U.S. Centers for Disease Control’s Office 
of Infectious Diseases and as a member of the Board of Regents of the National Library of Medicine. Dr. Taylor 
is well versed in developing future research agendas and analysis of new policy proposals and their implications. 
Dr. Taylor received her Ph.D. from the University of Queensland, Australia. 
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The conflict-of-interest policy of the National Academies of Sciences, Engineering, and Medicine (www. 
nationalacademies.org/coi) prohibits the appointment of an individual to a committee such as the one that authored 
this Consensus Study Report if the individual has a conflict of interest that is relevant to the task to be performed. 
An exception to this prohibition is permitted only if the National Academies determine that the conflict is unavoid¬ 
able and the conflict is promptly and publicly disclosed. 

When the committee that authored this report was established, a determination of whether there was a conflict 
of interest was made for each committee member given the individual’s circumstances and the task being under¬ 
taken by the committee. A determination that an individual has a conflict of interest is not an assessment of that 
individual’s actual behavior or character or ability to act objectively despite the conflicting interest. 

Dr. Patrick Boyle was determined to have a conflict of interest because he is an employee of Ginkgo Bio works. 

The National Academies determined that the experience and expertise of Dr. Boyle was needed for the com¬ 
mittee to accomplish the task for which it was established. The National Academies could not find another avail¬ 
able individual with the equivalent experience and expertise who did not have a conflict of interest. Therefore, the 
National Academies concluded that the conflict was unavoidable and publicly disclosed it through the National 
Academies Current Projects System (www8.nationalacademies.org/cp). 


171 


Copyright National Academy of Sciences. All rights reserved. 


Biodefense in the Age of Synthetic Biology 


Copyright National Academy of Sciences. All rights reserved. 



Biodefense in the Age of Synthetic Biology 


Appendix F 


Study Methods 


COMMITTEE COMPOSITION 

The National Academies of Sciences, Engineering, and Medicine (the National Academies) appointed a com¬ 
mittee of 13 experts to undertake the statement of task. Members provide the perspectives of academia, industry, 
government, and the nonprofit sector and have experience in synthetic biology, biosafety, microbiology, public 
health, bioinformatics, and risk assessment. Appendix D provides the biographical information for each commit¬ 
tee member. 


MEETINGS AND INFORMATION GATHERING 

The committee deliberated from approximately January 2017 to February 2018. To respond to its charge, the 
committee gathered information and data relevant to its statement of task by conducting a review of available 
literature and other publicly available resources, inviting experts to share perspectives at public meetings, and 
soliciting public comments online and in person. The study was conducted in two phases. In Phase 1 of the study, 
the committee met several times in person and held webinars to gather information, understand the needs of the 
relevant federal agencies, and develop a tool for assessing the biodefense threat to guide the study’s second phase. 
During this phase, the committee defined the type of framework that would guide the assessment of concerns, 
identified major categories of relevant technologies and applications to assess, and discussed the factors to include 
in the assessment. In Phase 2, the committee met additional times and incorporated further input and data gathering 
to refine the framework for assessing potential biodefense concerns. It applied this framework to analyze specific 
potential applications of synthetic biology and to identify current areas of concern created by synthetic biology. 

Over the course of the study, the committee held seven meetings in Washington, D.C., and Irvine, California. 
Three of these seven meetings included an open information-gathering component. During these open meetings, the 
committee heard from a variety of academic and private-sector researchers, as well as federal government officials. 
These meetings focused on understanding the current and near-term research being conducted in the field of syn¬ 
thetic biology and relevant adjacent scientific fields, understanding the current operations and research occurring 
within the federal government, understanding the existing concerns of biodefense and biosecurity professionals, 
and enlisting the assistance of these academics and professionals to scan the horizon for potential future technol- 
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ogy developments and emerging threats. The remaining four meetings were closed to the public and served as 
time for the committee members to deliberate and write their report. The three open meetings are detailed below. 

The first open meeting, held January 26-27,2017, in Washington, D.C., provided an opportunity for the com¬ 
mittee to discuss the study charge with the sponsor, as well as relevant needs of nonsponsor government agencies. 
The committee also heard a general overview of synthetic biology, a report out on previous work that had been 
performed by the President’s Council of Advisors on Science and Technology and the JASON advisory group 
relevant to this study, and a presentation from another group that had done risk analyses and framework develop¬ 
ment for the U.S. Department of Defense. 

The second meeting, held May 24-25, 2017, in Washington, D.C., included speakers who reviewed relevant 
aspects and current research on DNA synthesis, assembly, and engineering; on virus engineering, transmissibility, 
and zoonosis; on the idea of “ease of use” and its applicability to potential risks arising from synthetic biology; 
and an exercise in horizon-scanning and looking to the future. 

The third meeting, held July 6-7,2017, in Washington, D.C., included speakers who presented on the current 
state of public health and military preparedness; on efficacy of design in synthetic biology, focusing on what is 
truly possible and what is still not possible; on the current state of human modulation; and on emerging technolo¬ 
gies that might assist or abet overcoming existing technical barriers. 

The committee also held two public webinars. The first was held March 10, 2017, and included talks on how 
to approach creating a strategic framework to assess the potential risks of synthetic biology, as well as a review of 
some of the objectives and accomplishments of the biological weapons program of the Soviet Union. 

The second webinar was held March 23,2017, and included a talk on a review of prior attempts at frameworks 
and strategies to assess potential risks of synthetic biology. Both of these webinars were advertised and open to 
the public, although the committee did not accept questions or comments from the public during these webinars 
because their primary purpose was to serve as information-gathering activities for the committee. 

PUBLIC COMMUNICATION 

The committee’s two largest data-gathering meetings, in May and July 2017, provided opportunities to interact 
with additional stakeholders, including interested researchers and other parties. These participants contributed their 
views during open discussions following speaker presentations. The committee also worked to make its activities 
as transparent and accessible as possible for those who may not have been able to attend in person. The study 
website, http://nas-sites.org/dels/studies/strategies-for-identifying-and-addressing-vulnerabilities-posed-by-syn- 
thetic-biology, was updated regularly to reflect the recent and planned activities of the committee. Study outreach 
included a study-specific e-mail address for submitting comments and questions to the committee. 

Following the release of the study’s interim report in August 2017, the study committee requested input from 
the public via an online survey. The survey was distributed widely through existing National Academies mailing 
lists, through the social and professional networks of the study committee, and through the Engineering Biology 
Research Consortium’s mailing list. Public comments were collected, and the committee members reviewed all 
comments and incorporated relevant and applicable commentary into their work on the final report. 

Any information provided to the committee from outside sources or through the online comment tool is avail¬ 
able by request through the National Academies’ Public Access Records Office. 
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Invited Speakers 

The following individuals were invited speakers at meetings and data-gathering sessions of the committee: 


Chris Anderson 

University of California, Berkeley 

Polina Anikeeva 

Massachusetts Institute of Technology 

Ralph Baric 

University of North Carolina 

Kavita Berger 

Gryphon Scientific 

Ronald Breaker 

Yale University 

Roger Brent 

Fred Hutchinson Cancer Research Center 

Tom Burkett 

Baltimore Underground Science Space 

Sarah Carter 

Science Policy Consulting 

Rocco Casagrande 

Gryphon Scientific 

Christophoer Chyba 

Princeton University 

Susan Coller-Monarez 

Department of Homeland Security 

Patrik D’haeseleer 

Lawrence Livermore National Laboratory 

Drew Endy 

Stanford University 

Gerald L. Epstein 

Office of Science and Technology Policy 

Aaron P. Esser-Kahn 

University of California, Irvine 

Carolyn M. Floyd 

Office of the Director of National Intelligence 

John Glass 

J . Craig Venter Institute 

D. Christian Hassell 

U.S. Department of Defense 

Michael Jewett 

Northwestern University 

CDR Franca Jones 

Armed Forces Health Surveillance Center 

Lawrence Kerr 

U.S. Department of Health and Human Services 

Gregory Koblentz 

George Mason University 

George Korch 

U.S. Department of Health and Human Services 

Sriram Kosuri 

University of California, Los Angeles 

Jens H. Kuhn 

NIH/NIAID Integrated Research Facility at Fort Detrick 

Todd Kuiken 

North Carolina State University 

Devin Leake 

Ginkgo Bioworks 

Monique Mansoura 

Massachusetts Institute of Technology 

Corey Meyer 

Gryphon Scientific 

Paul Miller 

Synlogic 

Piers Millett 

Biosecure, Ltd. 

Steve Monroe 

U.S. Centers for Disease Control and Prevention 
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Richard Murray 

California Institute of Technology 

Megan Palmer 

Stanford University 

Colin Parrish 

Cornell University 

Amy Rasley 

Lawrence Livermore National Laboratory 

Ryan Ritterson 

Gryphon Scientific 

Howard Salis 

Pennsylvania State University 

Dan Tawfik 

Weizmann Institute of Science, Israel 

Luke Vandenberghe 

Harvard University 

Harry Yim 

Genomatica 
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